CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-16232

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.011

EPSS Ranking 61.5%

CVSS Severity

CVSS v3 Score 9.1

Proposed Action

Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.

Ransomware Campaign

Unknown

References

Products affected by CVE-2026-16232

Checkpoint » Multi-Domain Security Management » Version: r77.30

cpe:2.3:a:checkpoint:multi-domain_security_management:r77.30
Checkpoint » Multi-Domain Security Management » Version: r80

cpe:2.3:a:checkpoint:multi-domain_security_management:r80
Checkpoint » Multi-Domain Security Management » Version: r80.10

cpe:2.3:a:checkpoint:multi-domain_security_management:r80.10
Checkpoint » Multi-Domain Security Management » Version: r80.20

cpe:2.3:a:checkpoint:multi-domain_security_management:r80.20
Checkpoint » Multi-Domain Security Management » Version: r80.30

cpe:2.3:a:checkpoint:multi-domain_security_management:r80.30
Checkpoint » Multi-Domain Security Management » Version: r80.40

cpe:2.3:a:checkpoint:multi-domain_security_management:r80.40
Checkpoint » Multi-Domain Security Management » Version: r81

cpe:2.3:a:checkpoint:multi-domain_security_management:r81
Checkpoint » Multi-Domain Security Management » Version: r81.10

cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10
Checkpoint » Multi-Domain Security Management » Version: r81.20

cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20
Checkpoint » Multi-Domain Security Management » Version: r82

cpe:2.3:a:checkpoint:multi-domain_security_management:r82
Checkpoint » Multi-Domain Security Management » Version: r82.10

cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10
Checkpoint » Quantum Security Management » Version: r77.30

cpe:2.3:a:checkpoint:quantum_security_management:r77.30
Checkpoint » Quantum Security Management » Version: r80

cpe:2.3:a:checkpoint:quantum_security_management:r80
Checkpoint » Quantum Security Management » Version: r80.10

cpe:2.3:a:checkpoint:quantum_security_management:r80.10
Checkpoint » Quantum Security Management » Version: r80.20

cpe:2.3:a:checkpoint:quantum_security_management:r80.20
Checkpoint » Quantum Security Management » Version: r80.30

cpe:2.3:a:checkpoint:quantum_security_management:r80.30
Checkpoint » Quantum Security Management » Version: r80.40

cpe:2.3:a:checkpoint:quantum_security_management:r80.40
Checkpoint » Quantum Security Management » Version: r81

cpe:2.3:a:checkpoint:quantum_security_management:r81
Checkpoint » Quantum Security Management » Version: r81.10

cpe:2.3:a:checkpoint:quantum_security_management:r81.10
Checkpoint » Quantum Security Management » Version: r81.20

cpe:2.3:a:checkpoint:quantum_security_management:r81.20
Checkpoint » Quantum Security Management » Version: r82

cpe:2.3:a:checkpoint:quantum_security_management:r82
Checkpoint » Quantum Security Management » Version: r82.10

cpe:2.3:a:checkpoint:quantum_security_management:r82.10

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-16232

Products

Pricing

Contact Us