--- title: CVE-2026-16232: Critical Check Point SmartConsole... description: Check Point published a security advisory on July 22, 2026 for CVE-2026-16232, a critical authentication bypass (CVSS 9.1) in the SmartConsole login process... canonical: https://daily.dev/posts/cve-2026-16232-critical-check-point-smartconsole-authentication-bypass-exploited-in-the-wild-pvzyemfys twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild | daily.dev og:description: Check Point published a security advisory on July 22, 2026 for CVE-2026-16232, a critical authentication bypass (CVSS 9.1) in the SmartConsole login process... og:url: https://daily.dev/posts/cve-2026-16232-critical-check-point-smartconsole-authentication-bypass-exploited-in-the-wild-pvzyemfys og:image: https://api.daily.dev/og/posts/PvzyemfYS.png og:image:alt: CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild **[Rapid7 Cybersecurity Blog](https://daily.dev/sources/rapid7-blog)** · 4 min read · 0 upvotes · 0 comments ## Summary Check Point published a security advisory on July 22, 2026 for CVE-2026-16232, a critical authentication bypass (CVSS 9.1) in the SmartConsole login process affecting Security Management and Multi-Domain Management products. An unauthenticated remote attacker can obtain an application login token and gain full administrative privileges, enabling modification of security policies and configurations. Active exploitation in the wild has been confirmed, and CISA added the CVE to its Known Exploited Vulnerabilities catalog with a remediation deadline of July 25, 2026. Two additional critical vulnerabilities (CVE-2026-62144 and CVE-2026-62145) were also disclosed. Jumbo Hotfixes were released on July 22 for supported versions (R81.20, R82, R82.10); older versions have no fix specified. Interim mitigations include restricting Trusted Clients to known IP addresses and protecting management access with a firewall. Indicators of compromise including attacker IP addresses are provided. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Check Point SmartConsole Authentication Bypass Is Under Active Attack, and a PoC Is Now Public](https://daily.dev/posts/check-point-smartconsole-authentication-bypass-is-under-active-attack-and-a-poc-is-now-public-gygbdb6p9) · Latest Hacking News · 0 upvotes · 0 comments - [New Check Point flaw lets hackers execute code with root privileges](https://daily.dev/posts/new-check-point-flaw-lets-hackers-execute-code-with-root-privileges-wi9m2bohy) · BleepingComputer · 0 upvotes · 0 comments - [Critical Check Point VPN Zero-Day Exploited in the Wild \(CVE-2026-50751\)](https://daily.dev/posts/critical-check-point-vpn-zero-day-exploited-in-the-wild-cve-2026-50751--8lk5ari1g) · Rapid7 Cybersecurity Blog · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/cve-2026-16232-critical-check-point-smartconsole-authentication-bypass-exploited-in-the-wild-pvzyemfys) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild","url":"https://daily.dev/posts/cve-2026-16232-critical-check-point-smartconsole-authentication-bypass-exploited-in-the-wild-pvzyemfys","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cve-2026-16232-critical-check-point-smartconsole-authentication-bypass-exploited-in-the-wild-pvzyemfys"},"datePublished":"2026-07-23T12:17:25.057Z","dateModified":"2026-07-27T16:04:47.084Z","description":"Check Point published a security advisory on July 22, 2026 for CVE-2026-16232, a critical authentication bypass (CVSS 9.1) in the SmartConsole login process...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/403310fc83643451d0e643aaed18bd42?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/403310fc83643451d0e643aaed18bd42?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Rapid7 Cybersecurity Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Rapid7 Cybersecurity Blog","logo":"https://media.daily.dev/image/upload/logos/placeholder.jpg","url":"https://daily.dev/sources/rapid7-blog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cve-2026-16232-critical-check-point-smartconsole-authentication-bypass-exploited-in-the-wild-pvzyemfys","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Rapid7 Cybersecurity Blog","item":"https://daily.dev/sources/rapid7-blog"},{"@type":"ListItem","position":3,"name":"CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild"}]} ```