Multiple vulnerabilities in Check Point products (July 23, 2026)
Actively exploited. At least one CVE in this advisory is listed in the CISA Known Exploited Vulnerabilities catalog — exploitation has been observed in the wild. Treat remediation as urgent.
Multiple vulnerabilities have been discovered in Check Point products. They allow an attacker to cause privilege escalation and security policy bypass. Check Point indicates that the vulnerability CVE-2026-16232 is actively exploited.
CSIRTS triage
- What
- Multiple vulnerabilities allow an attacker to cause privilege escalation and security policy bypass.
- Who is affected
- Check Point product deployments are affected.
- Urgency
- Remediation is urgent as one of the vulnerabilities is actively exploited.
- Action
- Apply the latest security patches provided by Check Point.
AI-assisted analysis generated from the source advisory — verify against the original.
Details
Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0912/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Exploitation confirmedCVE-2026-16232Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 99% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-16232 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] Check Point SmartConsole: Multiple vulnerabilitiescert-bund
- unknownexploitedNCSC-2026-0264 [1.00] [M/H] Vulnerabilities fixed in Check Point Security Management productsncsc-nl
- criticalexploitedCheck Point security advisory (AV26-735) – Update 1cccs
- criticalexploitedCVE-2026-16232: An authentication bypass vulnerability in the Check Point SmartConsole login process allows an…nvd
- highexploitedCISA Adds Two Known Exploited Vulnerabilities to Catalogcisa
- criticalexploitedCVE-2026-16232: Check Point SmartConsole Improper Authentication Vulnerabilitycisa-kev
More from CERT-FR Avis de sécurité
- unknownMultiples vulnérabilités dans le noyau Linux d'Ubuntu (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans le noyau Linux de SUSE (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans le noyau Linux de Red Hat (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans Progress MOVEit Transfer (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans le noyau Linux de Debian LTS (31 juillet 2026)2026-07-31