Check Point SmartConsole Zero Day Actively Exploited

THREAT INTELLIGENCE

Peer Review

4.8

Proven Trust

Dark blue circle with two overlapping checkmarks, one green and one light blue.

ISO 27001 text with a globe outline symbol on a black background.

2025 winner badge for Cyber Security Excellence Awards with gold and black design.

Critical

CVE-2026-16232

Other

July 23, 2026

Executive Summary

CVE-2026-16232 (CVSS 9.3): authentication bypass in SmartConsole allows unauthenticated remote attackers to obtain admin-level login tokens.

Key Details

Affected Platform

Attack Surface

Network accessible, unauthenticated

Recommended Action

Apply vendor patch

Affected Environment

Check Point Security Management Server and Multi-Domain Security Management Server (MDS), all versions from R77.30 through R82.10.

Operational Impact

Successful exploitation enables modification of firewall security policies and configurations, directly undermining network defences.

Technical Root Cause

Flaw in SmartConsole login process allows application token issuance without valid credential verification.

Recommended Mitigation

Restrict Trusted Clients to specific IP addresses or subnets immediately.
Apply Check Point patches after testing.
Firewall management access to trusted IPs only.

Concerned about your exposure?

Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.

Discuss Your Security Exposure Explore Managed Detection and Response

Assess your risk

Identify affected systems

Plan remediation

Practical, vendor-aligned guidance

Get expert support

From our 24/7 security team

Stay ahead of emerging threats

Get the latest threat intelligence and security advisories from Smarttech247.

Full Technical Report

Download the complete analysis, including detailed technical findings and references.

Download Full Report (PDF)

References

Check Point Security Advisory, Check Point Hardening Best Practices Guide, CVE-2026-16232