--- title: Check Point SmartConsole Authentication Bypass Is Under... description: Check Point has confirmed active exploitation of CVE-2026-16232, a critical authentication bypass (CVSS 9.3) in SmartConsole's Security Management and... canonical: https://daily.dev/posts/check-point-smartconsole-authentication-bypass-is-under-active-attack-and-a-poc-is-now-public-gygbdb6p9 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Check Point SmartConsole Authentication Bypass Is Under Active Attack, and a PoC Is Now Public | daily.dev og:description: Check Point has confirmed active exploitation of CVE-2026-16232, a critical authentication bypass (CVSS 9.3) in SmartConsole's Security Management and... og:url: https://daily.dev/posts/check-point-smartconsole-authentication-bypass-is-under-active-attack-and-a-poc-is-now-public-gygbdb6p9 og:image: https://api.daily.dev/og/posts/GYgBdB6P9.png og:image:alt: Check Point SmartConsole Authentication Bypass Is Under Active Attack, and a PoC Is Now Public og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Check Point SmartConsole Authentication Bypass Is Under Active Attack, and a PoC Is Now Public **[Latest Hacking News](https://daily.dev/sources/lhn)** · 5 min read · 0 upvotes · 0 comments ## Summary Check Point has confirmed active exploitation of CVE-2026-16232, a critical authentication bypass (CVSS 9.3) in SmartConsole's Security Management and Multi-Domain Management servers. The flaw allows an unauthenticated attacker to gain full administrator access by exploiting how the login process handles SIC identities — accepting an attacker-supplied distinguished name without validating it against the peer certificate. Rapid7 published a technical breakdown and a public Python PoC on GitHub that can also verify patch status. CISA added the CVE to its Known Exploited Vulnerabilities catalogue with a three-day remediation deadline for federal agencies. Emergency Jumbo Hotfixes are available for R81.20, R82, and R82.10. Affected organizations should apply the hotfix immediately, restrict Trusted Clients to known IP addresses, and avoid exposing management servers directly to the internet. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [New Check Point flaw lets hackers execute code with root privileges](https://daily.dev/posts/new-check-point-flaw-lets-hackers-execute-code-with-root-privileges-wi9m2bohy) · BleepingComputer · 0 upvotes · 0 comments - [Check Point VPN Authentication Bypass \(CVE-2026-50751\): Client-Controlled IKEv1 Auth Flipped by Ransomware Affiliate](https://daily.dev/posts/check-point-vpn-authentication-bypass-cve-2026-50751-client-controlled-ikev1-auth-flipped-by-rans-ehcuolknf) · Latest Hacking News · 0 upvotes · 0 comments - [One Port to Root: Weaponizing Check Point Management CVE-2026-93616](https://daily.dev/posts/one-port-to-root-weaponizing-check-point-management-cve-2026-93616-foy8qulzb) · Sliver C2 Documentation · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/check-point-smartconsole-authentication-bypass-is-under-active-attack-and-a-poc-is-now-public-gygbdb6p9) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Check Point SmartConsole Authentication Bypass Is Under Active Attack, and a PoC Is Now Public","url":"https://daily.dev/posts/check-point-smartconsole-authentication-bypass-is-under-active-attack-and-a-poc-is-now-public-gygbdb6p9","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/check-point-smartconsole-authentication-bypass-is-under-active-attack-and-a-poc-is-now-public-gygbdb6p9"},"datePublished":"2026-08-02T11:06:58.881Z","dateModified":"2026-08-02T11:07:20.390Z","description":"Check Point has confirmed active exploitation of CVE-2026-16232, a critical authentication bypass (CVSS 9.3) in SmartConsole's Security Management and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/989f88163f6f0916504e34866da6637f?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/989f88163f6f0916504e34866da6637f?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Latest Hacking News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Latest Hacking News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/5110318ded6e43f1bb12facdeb2b1965","url":"https://daily.dev/sources/lhn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/check-point-smartconsole-authentication-bypass-is-under-active-attack-and-a-poc-is-now-public-gygbdb6p9","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Latest Hacking News","item":"https://daily.dev/sources/lhn"},{"@type":"ListItem","position":3,"name":"Check Point SmartConsole Authentication Bypass Is Under Active Attack, and a PoC Is Now Public"}]} ```