--- title: Check Point warns of SmartConsole zero-day exploited in... description: Check Point Software has patched an actively exploited zero-day vulnerability (CVE-2026-16232) in its SmartConsole admin panel. The authentication bypass flaw... canonical: https://daily.dev/posts/check-point-warns-of-smartconsole-zero-day-exploited-in-attacks-ypcy47ssa twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Check Point warns of SmartConsole zero-day exploited in attacks | daily.dev og:description: Check Point Software has patched an actively exploited zero-day vulnerability (CVE-2026-16232) in its SmartConsole admin panel. The authentication bypass flaw... og:url: https://daily.dev/posts/check-point-warns-of-smartconsole-zero-day-exploited-in-attacks-ypcy47ssa og:image: https://api.daily.dev/og/posts/YPcY47ssa.png og:image:alt: Check Point warns of SmartConsole zero-day exploited in attacks og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Check Point warns of SmartConsole zero-day exploited in attacks **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary Check Point Software has patched an actively exploited zero-day vulnerability (CVE-2026-16232) in its SmartConsole admin panel. The authentication bypass flaw allows unauthenticated attackers to obtain an application login token granting administrator privileges, enabling modification of security policies and configurations. Exploitation requires the Management Server IP to be internet-exposed with no Trusted Client restrictions. CISA added the flaw to its Known Exploited Vulnerabilities catalog and ordered U.S. federal agencies to patch by July 25. Admins unable to patch immediately should restrict Trusted Clients to known IPs and block unauthorized management access. Specific IP addresses and audit log queries are provided to check for compromise. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Check Point SmartConsole Authentication Bypass Is Under Active Attack, and a PoC Is Now Public](https://daily.dev/posts/check-point-smartconsole-authentication-bypass-is-under-active-attack-and-a-poc-is-now-public-gygbdb6p9) · Latest Hacking News · 0 upvotes · 0 comments - [CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day](https://daily.dev/posts/cisa-gives-feds-3-days-to-patch-check-point-vpn-bug-exploited-as-zero-day-v4jbko8vp) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#vulnerability](https://daily.dev/tags/vulnerability), [#zero-day](https://daily.dev/tags/zero-day) [View this post on daily.dev](https://daily.dev/posts/check-point-warns-of-smartconsole-zero-day-exploited-in-attacks-ypcy47ssa) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Check Point warns of SmartConsole zero-day exploited in attacks","url":"https://daily.dev/posts/check-point-warns-of-smartconsole-zero-day-exploited-in-attacks-ypcy47ssa","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/check-point-warns-of-smartconsole-zero-day-exploited-in-attacks-ypcy47ssa"},"datePublished":"2026-07-23T08:15:44.424Z","dateModified":"2026-07-27T16:04:47.084Z","description":"Check Point Software has patched an actively exploited zero-day vulnerability (CVE-2026-16232) in its SmartConsole admin panel. The authentication bypass flaw...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/50b18b249d66ad8bdb194d5db084951a?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/50b18b249d66ad8bdb194d5db084951a?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/check-point-warns-of-smartconsole-zero-day-exploited-in-attacks-ypcy47ssa","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,vulnerability,zero-day","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Check Point warns of SmartConsole zero-day exploited in attacks"}]} ```