On point: Check Point has patched a critical authentication vulnerability (CVE-2026-16232) in SmartConsole that is already being exploited and allows full admin access.
Check Point has released security updates for its Security Management and Multi-Domain Management (MDSM) products. A critical authentication vulnerability in SmartConsole tracked as CVE-2026-16232 is already being actively exploited.
The security vulnerability CVE-2026-16232 (CVSS 9.3) affects the login process of Check Point SmartConsole and enables attackers to bypass authentication and gain full admin access rights. According to Check Point, the vulnerability is already under active exploitation.
For CISOs, this represents an immediate risk to the security infrastructure. SmartConsole is a central management component for security appliances and multi-domain environments – a successfully compromised admin account leads to complete control over security policies and potential lateral network access.
Affected organizations should deploy the available updates promptly. Check Point strongly recommends an immediate review of management systems for signs of exploitation and rotation of admin credentials.
Source: thehackernews.com · Published 23 July 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.