9.8

CVE-2026-16232

Warnung
Medienbericht

Authentication Bypass in the SmartConsole Login Process Using an Application Token

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Checkpoint ≫ Multi-domain Security Management Version >= r77.30 < r81.20
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Update-
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_10
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_101
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_103
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_105
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_111
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_113
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_115
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_118
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_119
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_120
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_122
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_126
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_127
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_14
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_141
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_146
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_24
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_26
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_38
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_41
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_43
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_45
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_53
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_54
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_65
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_70
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_76
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_79
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_8
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_84
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_89
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_90
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_92
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_96
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_98
Checkpoint ≫ Multi-domain Security Management Versionr81.20 Updatetake_99
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_10
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_103
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_107
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_12
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_14
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_18
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_19
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_25
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_33
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_34
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_36
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_39
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_41
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_43
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_44
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_60
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_73
Checkpoint ≫ Multi-domain Security Management Versionr82 Updatetake_91
Checkpoint ≫ Multi-domain Security Management Versionr82.10 Update-
Checkpoint ≫ Multi-domain Security Management Versionr82.10 Updatetake_19
Checkpoint ≫ Multi-domain Security Management Versionr82.10 Updatetake_24
Checkpoint ≫ Multi-domain Security Management Versionr82.10 Updatetake_6
Checkpoint ≫ Quantum Security Management Version >= r77.30 < r81.20
Checkpoint ≫ Quantum Security Management Versionr81.20 Update-
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_10
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_101
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_103
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_105
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_111
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_113
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_115
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_118
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_119
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_120
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_122
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_126
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_127
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_14
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_141
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_146
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_24
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_26
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_38
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_41
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_43
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_45
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_53
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_54
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_65
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_70
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_76
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_79
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_8
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_84
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_89
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_90
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_92
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_96
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_98
Checkpoint ≫ Quantum Security Management Versionr81.20 Updatetake_99
Checkpoint ≫ Quantum Security Management Versionr82 Update-
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_10
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_103
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_107
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_12
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_14
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_18
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_19
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_25
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_33
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_34
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_36
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_39
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_41
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_43
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_44
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_60
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_73
Checkpoint ≫ Quantum Security Management Versionr82 Updatetake_91
Checkpoint ≫ Quantum Security Management Versionr82.10 Update-
Checkpoint ≫ Quantum Security Management Versionr82.10 Updatetake_19
Checkpoint ≫ Quantum Security Management Versionr82.10 Updatetake_24
Checkpoint ≫ Quantum Security Management Versionr82.10 Updatetake_6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login

22.07.2026: CISA Known Exploited Vulnerabilities (KEV) Catalog

Check Point SmartConsole Improper Authentication Vulnerability

Schwachstelle

Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.

Beschreibung

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 73.3% 0.994
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Checkpoint 9.3 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
29.07.2026 11:08
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
27.07.2026 16:36
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
23.07.2026 10:32
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
23.07.2026 10:17
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
23.07.2026 09:32
https://support.checkpoint.com/results/sk/sk185169
Patch
Vendor Advisory
Mitigation
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232
US Government Resource