CVE-2026-16232: Check Point SmartConsole Improper Authentication Vulnerability
Published Jul 22, 2026
·Updated
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.
Other sources
Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.
— CISA
Affected Software
123 affected components
Check Point SmartConsole
Checkpoint Multi-domain Security Management>=r77.30<r81.20
Checkpoint Multi-domain Security Management=r81.20
Checkpoint Multi-domain Security Management=r81.20-take_10
Checkpoint Multi-domain Security Management=r81.20-take_101
Checkpoint Multi-domain Security Management=r81.20-take_103
Checkpoint Multi-domain Security Management=r81.20-take_105
Checkpoint Multi-domain Security Management=r81.20-take_111
Checkpoint Multi-domain Security Management=r81.20-take_113
Checkpoint Multi-domain Security Management=r81.20-take_115
Checkpoint Multi-domain Security Management=r81.20-take_118
Checkpoint Multi-domain Security Management=r81.20-take_119
Checkpoint Multi-domain Security Management=r81.20-take_120
Checkpoint Multi-domain Security Management=r81.20-take_122
Checkpoint Multi-domain Security Management=r81.20-take_126
Checkpoint Multi-domain Security Management=r81.20-take_127
Checkpoint Multi-domain Security Management=r81.20-take_14
Checkpoint Multi-domain Security Management=r81.20-take_141
Checkpoint Multi-domain Security Management=r81.20-take_146
Checkpoint Multi-domain Security Management=r81.20-take_24
Checkpoint Multi-domain Security Management=r81.20-take_26
Checkpoint Multi-domain Security Management=r81.20-take_38
Checkpoint Multi-domain Security Management=r81.20-take_41
Checkpoint Multi-domain Security Management=r81.20-take_43
Checkpoint Multi-domain Security Management=r81.20-take_45
Checkpoint Multi-domain Security Management=r81.20-take_53
Checkpoint Multi-domain Security Management=r81.20-take_54
Checkpoint Multi-domain Security Management=r81.20-take_65
Checkpoint Multi-domain Security Management=r81.20-take_70
Checkpoint Multi-domain Security Management=r81.20-take_76
Checkpoint Multi-domain Security Management=r81.20-take_79
Checkpoint Multi-domain Security Management=r81.20-take_8
Checkpoint Multi-domain Security Management=r81.20-take_84
Checkpoint Multi-domain Security Management=r81.20-take_89
Checkpoint Multi-domain Security Management=r81.20-take_90
Checkpoint Multi-domain Security Management=r81.20-take_92
Checkpoint Multi-domain Security Management=r81.20-take_96
Checkpoint Multi-domain Security Management=r81.20-take_98
Checkpoint Multi-domain Security Management=r81.20-take_99
Checkpoint Multi-domain Security Management=r82
Checkpoint Multi-domain Security Management=r82-take_10
Checkpoint Multi-domain Security Management=r82-take_103
Checkpoint Multi-domain Security Management=r82-take_107
Checkpoint Multi-domain Security Management=r82-take_12
Checkpoint Multi-domain Security Management=r82-take_14
Checkpoint Multi-domain Security Management=r82-take_18
Checkpoint Multi-domain Security Management=r82-take_19
Checkpoint Multi-domain Security Management=r82-take_25
Checkpoint Multi-domain Security Management=r82-take_33
Checkpoint Multi-domain Security Management=r82-take_34
Checkpoint Multi-domain Security Management=r82-take_36
Checkpoint Multi-domain Security Management=r82-take_39
Checkpoint Multi-domain Security Management=r82-take_41
Checkpoint Multi-domain Security Management=r82-take_43
Checkpoint Multi-domain Security Management=r82-take_44
Checkpoint Multi-domain Security Management=r82-take_60
Checkpoint Multi-domain Security Management=r82-take_73
Checkpoint Multi-domain Security Management=r82-take_91
Checkpoint Multi-domain Security Management=r82.10
Checkpoint Multi-domain Security Management=r82.10-take_19
Checkpoint Multi-domain Security Management=r82.10-take_24
Checkpoint Multi-domain Security Management=r82.10-take_6
Checkpoint Quantum Security Management>=r77.30<r81.20
Checkpoint Quantum Security Management=r81.20
Checkpoint Quantum Security Management=r81.20-take_10
Checkpoint Quantum Security Management=r81.20-take_101
Checkpoint Quantum Security Management=r81.20-take_103
Checkpoint Quantum Security Management=r81.20-take_105
Checkpoint Quantum Security Management=r81.20-take_111
Checkpoint Quantum Security Management=r81.20-take_113
Checkpoint Quantum Security Management=r81.20-take_115
Checkpoint Quantum Security Management=r81.20-take_118
Checkpoint Quantum Security Management=r81.20-take_119
Checkpoint Quantum Security Management=r81.20-take_120
Checkpoint Quantum Security Management=r81.20-take_122
Checkpoint Quantum Security Management=r81.20-take_126
Checkpoint Quantum Security Management=r81.20-take_127
Checkpoint Quantum Security Management=r81.20-take_14
Checkpoint Quantum Security Management=r81.20-take_141
Checkpoint Quantum Security Management=r81.20-take_146
Checkpoint Quantum Security Management=r81.20-take_24
Checkpoint Quantum Security Management=r81.20-take_26
Checkpoint Quantum Security Management=r81.20-take_38
Checkpoint Quantum Security Management=r81.20-take_41
Checkpoint Quantum Security Management=r81.20-take_43
Checkpoint Quantum Security Management=r81.20-take_45
Checkpoint Quantum Security Management=r81.20-take_53
Checkpoint Quantum Security Management=r81.20-take_54
Checkpoint Quantum Security Management=r81.20-take_65
Checkpoint Quantum Security Management=r81.20-take_70
Checkpoint Quantum Security Management=r81.20-take_76
Checkpoint Quantum Security Management=r81.20-take_79
Checkpoint Quantum Security Management=r81.20-take_8
Checkpoint Quantum Security Management=r81.20-take_84
Checkpoint Quantum Security Management=r81.20-take_89
Checkpoint Quantum Security Management=r81.20-take_90
Checkpoint Quantum Security Management=r81.20-take_92
Checkpoint Quantum Security Management=r81.20-take_96
Checkpoint Quantum Security Management=r81.20-take_98
Checkpoint Quantum Security Management=r81.20-take_99
Checkpoint Quantum Security Management=r82
Checkpoint Quantum Security Management=r82-take_10
Checkpoint Quantum Security Management=r82-take_103
Checkpoint Quantum Security Management=r82-take_107
Checkpoint Quantum Security Management=r82-take_12
Checkpoint Quantum Security Management=r82-take_14
Checkpoint Quantum Security Management=r82-take_18
Checkpoint Quantum Security Management=r82-take_19
Checkpoint Quantum Security Management=r82-take_25
Checkpoint Quantum Security Management=r82-take_33
Checkpoint Quantum Security Management=r82-take_34
Checkpoint Quantum Security Management=r82-take_36
Checkpoint Quantum Security Management=r82-take_39
Checkpoint Quantum Security Management=r82-take_41
Checkpoint Quantum Security Management=r82-take_43
Checkpoint Quantum Security Management=r82-take_44
Checkpoint Quantum Security Management=r82-take_60
Checkpoint Quantum Security Management=r82-take_73
Checkpoint Quantum Security Management=r82-take_91
Checkpoint Quantum Security Management=r82.10
Checkpoint Quantum Security Management=r82.10-take_19
Checkpoint Quantum Security Management=r82.10-take_24
Checkpoint Quantum Security Management=r82.10-take_6
Remediation
Information
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Patch Available
Event History
Jul 22, 2026
CVE Published
via CISA·12:00 AM
Known Exploited
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
CVE Published
via MITRE·01:53 PM
Data Sourced
via MITRE·01:53 PM
DescriptionWeakness
Data Sourced
via NVD·02:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-16232?
CVE-2026-16232 has a severity rating of 92, indicating a high level of risk.
2
How do I fix CVE-2026-16232?
To fix CVE-2026-16232, apply the latest patches and updates provided by Check Point for SmartConsole.
3
What does CVE-2026-16232 allow an attacker to do?
CVE-2026-16232 allows an unauthenticated remote attacker to bypass authentication and gain full administrative privileges.
4
What products are affected by CVE-2026-16232?
CVE-2026-16232 specifically affects the Check Point SmartConsole application.
5
When was CVE-2026-16232 published?
CVE-2026-16232 was published on July 22, 2026.