← Back

CVE-2026-16232

Published: Jul 22, 2026Modified: Aug 10, 2026CISA KEV

JSON object

Loading...
9.3
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: cve@checkpoint.com (Secondary)

Description

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.

Affected (122)

2 products
Multi Domain Security Management
Quantum Security Management
Configuration A
61 vulnerable
Vulnerable SoftwareAffected Versions
Checkpoint
From r77.30 to r81.20
Version r81.20
Version r81.20 take_101
Version r81.20 take_103
Version r81.20 take_105
Version r81.20 take_10
Version r81.20 take_111
Version r81.20 take_113
Version r81.20 take_115
Version r81.20 take_118
Version r81.20 take_119
Version r81.20 take_120
Version r81.20 take_122
Version r81.20 take_126
Version r81.20 take_127
Version r81.20 take_141
Version r81.20 take_146
Version r81.20 take_14
Version r81.20 take_24
Version r81.20 take_26
Version r81.20 take_38
Version r81.20 take_41
Version r81.20 take_43
Version r81.20 take_45
Version r81.20 take_53
Version r81.20 take_54
Version r81.20 take_65
Version r81.20 take_70
Version r81.20 take_76
Version r81.20 take_79
Version r81.20 take_84
Version r81.20 take_89
Version r81.20 take_8
Version r81.20 take_90
Version r81.20 take_92
Version r81.20 take_96
Version r81.20 take_98
Version r81.20 take_99
Version r82.10
Version r82.10 take_19
Version r82.10 take_24
Version r82.10 take_6
Version r82
Version r82 take_103
Version r82 take_107
Version r82 take_10
Version r82 take_12
Version r82 take_14
Version r82 take_18
Version r82 take_19
Version r82 take_25
Version r82 take_33
Version r82 take_34
Version r82 take_36
Version r82 take_39
Version r82 take_41
Version r82 take_43
Version r82 take_44
Version r82 take_60
Version r82 take_73
Version r82 take_91
Configuration B
61 vulnerable
Vulnerable SoftwareAffected Versions
Checkpoint
From r77.30 to r81.20
Version r81.20
Version r81.20 take_101
Version r81.20 take_103
Version r81.20 take_105
Version r81.20 take_10
Version r81.20 take_111
Version r81.20 take_113
Version r81.20 take_115
Version r81.20 take_118
Version r81.20 take_119
Version r81.20 take_120
Version r81.20 take_122
Version r81.20 take_126
Version r81.20 take_127
Version r81.20 take_141
Version r81.20 take_146
Version r81.20 take_14
Version r81.20 take_24
Version r81.20 take_26
Version r81.20 take_38
Version r81.20 take_41
Version r81.20 take_43
Version r81.20 take_45
Version r81.20 take_53
Version r81.20 take_54
Version r81.20 take_65
Version r81.20 take_70
Version r81.20 take_76
Version r81.20 take_79
Version r81.20 take_84
Version r81.20 take_89
Version r81.20 take_8
Version r81.20 take_90
Version r81.20 take_92
Version r81.20 take_96
Version r81.20 take_98
Version r81.20 take_99
Version r82.10
Version r82.10 take_19
Version r82.10 take_24
Version r82.10 take_6
Version r82
Version r82 take_103
Version r82 take_107
Version r82 take_10
Version r82 take_12
Version r82 take_14
Version r82 take_18
Version r82 take_19
Version r82 take_25
Version r82 take_33
Version r82 take_34
Version r82 take_36
Version r82 take_39
Version r82 take_41
Version r82 take_43
Version r82 take_44
Version r82 take_60
Version r82 take_73
Version r82 take_91

References (2)

Source: cve@checkpoint.com
MitigationPatchVendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.