In a nutshell: A vulnerability in Check Point’s SmartConsole is being actively exploited in the wild, granting attackers administrator access to the security management platform.
A critical vulnerability in Check Point’s SmartConsole is actively being exploited, enabling attackers to assume administrator rights. Several customer environments have already been compromised.
Check Point, a leading provider of network and security solutions, issued a warning about a critical vulnerability in its SmartConsole – the central management application for Checkpoint security devices. The vulnerability allows unauthenticated or low-privileged attackers to gain administrator rights.
What is particularly critical is that attackers are already actively exploiting this vulnerability. According to Check Point, several customer environments have already been affected by successful compromises. Seeing a SmartConsole compromised with administrative privileges means for an organization potential access to all managed network elements and security policies – a scenario with the highest possible business risk.
Affected organizations should immediately evaluate their SmartConsole inventory and apply available security patches. In parallel, it is recommended to check access logs and audit logs for suspicious activities and known attacker IP addresses in order to detect potential compromises early.
Source: www.security-insider.de · Published 30 July 2026
Lumi AI News — AI-assisted curation pursuant to Article 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.7.3.