9.8
CVE-2026-16232
- EPSS 73.3%
- Veröffentlicht 22.07.2026 13:53:09
- Zuletzt bearbeitet 10.08.2026 19:59:12
- Erkennungen
Authentication Bypass in the SmartConsole Login Process Using an Application Token
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Checkpoint ≫ Multi-domain Security Management Version >= r77.30 < r81.20
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update -
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_10
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_101
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_103
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_105
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_111
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_113
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_115
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_118
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_119
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_120
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_122
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_126
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_127
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_14
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_141
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_146
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_24
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_26
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_38
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_41
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_43
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_45
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_53
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_54
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_65
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_70
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_76
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_79
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_8
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_84
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_89
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_90
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_92
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_96
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_98
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_99
Checkpoint ≫ Multi-domain Security Management Version r82 Update -
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_10
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_103
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_107
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_12
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_14
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_18
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_19
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_25
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_33
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_34
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_36
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_39
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_41
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_43
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_44
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_60
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_73
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_91
Checkpoint ≫ Multi-domain Security Management Version r82.10 Update -
Checkpoint ≫ Multi-domain Security Management Version r82.10 Update take_19
Checkpoint ≫ Multi-domain Security Management Version r82.10 Update take_24
Checkpoint ≫ Multi-domain Security Management Version r82.10 Update take_6
Checkpoint ≫ Quantum Security Management Version >= r77.30 < r81.20
Checkpoint ≫ Quantum Security Management Version r81.20 Update -
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_10
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_101
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_103
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_105
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_111
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_113
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_115
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_118
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_119
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_120
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_122
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_126
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_127
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_14
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_141
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_146
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_24
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_26
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_38
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_41
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_43
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_45
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_53
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_54
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_65
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_70
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_76
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_79
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_8
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_84
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_89
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_90
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_92
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_96
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_98
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_99
Checkpoint ≫ Quantum Security Management Version r82 Update -
Checkpoint ≫ Quantum Security Management Version r82 Update take_10
Checkpoint ≫ Quantum Security Management Version r82 Update take_103
Checkpoint ≫ Quantum Security Management Version r82 Update take_107
Checkpoint ≫ Quantum Security Management Version r82 Update take_12
Checkpoint ≫ Quantum Security Management Version r82 Update take_14
Checkpoint ≫ Quantum Security Management Version r82 Update take_18
Checkpoint ≫ Quantum Security Management Version r82 Update take_19
Checkpoint ≫ Quantum Security Management Version r82 Update take_25
Checkpoint ≫ Quantum Security Management Version r82 Update take_33
Checkpoint ≫ Quantum Security Management Version r82 Update take_34
Checkpoint ≫ Quantum Security Management Version r82 Update take_36
Checkpoint ≫ Quantum Security Management Version r82 Update take_39
Checkpoint ≫ Quantum Security Management Version r82 Update take_41
Checkpoint ≫ Quantum Security Management Version r82 Update take_43
Checkpoint ≫ Quantum Security Management Version r82 Update take_44
Checkpoint ≫ Quantum Security Management Version r82 Update take_60
Checkpoint ≫ Quantum Security Management Version r82 Update take_73
Checkpoint ≫ Quantum Security Management Version r82 Update take_91
Checkpoint ≫ Quantum Security Management Version r82.10 Update -
Checkpoint ≫ Quantum Security Management Version r82.10 Update take_19
Checkpoint ≫ Quantum Security Management Version r82.10 Update take_24
Checkpoint ≫ Quantum Security Management Version r82.10 Update take_6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login22.07.2026: CISA Known Exploited Vulnerabilities (KEV) Catalog
Check Point SmartConsole Improper Authentication Vulnerability
SchwachstelleCheck Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.
BeschreibungApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Erforderliche Maßnahmen| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 73.3% | 0.994 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| Checkpoint | 9.3 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://support.checkpoint.com/results/sk/sk185169
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232