A critical vulnerability in Check Point’s management server enables unauthenticated access with full admin privileges, granting control over all managed gateways; the exploit has been known in attack attempts since April.
Check Point has patched a critical authentication vulnerability (CVE-2026-16232) in SmartConsole that is already being exploited and allows full admin access.
