CVE-2026-16232
CRITICAL CISA KEVDescription
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.
Is your site exposed to CVE-2026-16232?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
9.1
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS — Exploit Prediction
0.0107
Probability of exploitation
0.61%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
CISA Known Exploited Vulnerability
This vulnerability is actively exploited in the wild.
Added: Jul 22, 2026
Remediation due: Jul 25, 2026
Weakness Type (CWE)
CWE-287
Improper Authentication
Affected Products
| Vendor | Product |
|---|---|
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | multi-domain_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
| checkpoint | quantum_security_management |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2026-16232? +
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers. It has a CVSS v3.1 base score of 9.1 (CRITICAL). This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild.
How severe is CVE-2026-16232? +
CVE-2026-16232 has a CVSS v3.1 score of 9.1 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately. The EPSS score is 0.0107, placing it in the 1th percentile for exploitation probability.
What products are affected by CVE-2026-16232? +
CVE-2026-16232 affects products from checkpoint, specifically: multi-domain_security_management, quantum_security_management. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2026-16232? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.
Related Vulnerabilities
CVE-2026-47202
Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unauthenticated …
CVE-2026-61740
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, when LightRAG is deployed with LIGHTRAG_API_KEY set but AUTH_ACCOUNTS unset, …
CVE-2026-47159
Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO discovery and pre-validation flow returned organization-related SSO …
CVE-2026-44720
OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX …
CVE-2025-24032
PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if cert_policy …
CVE-2024-5174
A flaw in Gliffy results in broken authentication through the reset functionality of the application.