CVE-2026-16232: Check Point SmartConsole Improper Authentication Vulnerability
Actively exploited. At least one CVE in this advisory is listed in the CISA Known Exploited Vulnerabilities catalog — exploitation has been observed in the wild. Treat remediation as urgent.
Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.
CSIRTS triage
- What
- An improper authentication vulnerability allows unauthenticated remote access with administrative privileges.
- Who is affected
- Users of Check Point SmartConsole.
- Urgency
- Remediation is urgent due to active exploitation.
- Action
- Apply the necessary updates immediately.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch SmartConsole
Get an email when a new SmartConsole advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-16232
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Exploitation confirmedCVE-2026-16232Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 99% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-16232 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] Check Point SmartConsole: Multiple vulnerabilitiescert-bund
- unknownexploitedNCSC-2026-0264 [1.00] [M/H] Vulnerabilities fixed in Check Point Security Management productsncsc-nl
- criticalexploitedCheck Point security advisory (AV26-735) – Update 1cccs
- unknownexploitedMultiple vulnerabilities in Check Point products (July 23, 2026)cert-fr-avis
- criticalexploitedCVE-2026-16232: An authentication bypass vulnerability in the Check Point SmartConsole login process allows an…nvd
- highexploitedCISA Adds Two Known Exploited Vulnerabilities to Catalogcisa
Recent advisories for Check Point SmartConsole
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- high[NEW] [high] Check Point SmartConsole: Multiple vulnerabilitiescert-bund · 2026-07-30
- criticalexploitedCVE-2026-16232: An authentication bypass vulnerability in the Check Point SmartConsole login process allows an…nvd · 2026-07-22
More from CISA Known Exploited Vulnerabilities
- criticalCVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability2026-07-29
- criticalCVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability2026-07-27
- criticalCVE-2026-16812: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability2026-07-27
- criticalCVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability2026-07-22
- criticalCVE-2026-60137: WordPress Core SQL Injection Vulnerability2026-07-21