Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-16232

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:08c63abf572f9e0c9d58b5fb1df01722cd802dfe8ffd5325c6be0a7c63a9ce25
Known exploited
CISA KEV
Disputed
No
Stale source
No
Conflicts
2

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"product":"Multi-Domain Security Management","vendor":"checkpoint","versions":[{"status":"affected","version":"R82.10 with Jumbo Hotfix Take 36 or below"},{"status":"affected","version":"R82 with Jumbo Hotfix Take 118 or below"},{"status":"affected","version":"R81.20 with Jumbo Hotfix Take 158 or below"},{"status":"affected","version":"R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1c7a8df24f4f7b36ef8c79f260191a1e68c060cd033c3950dfc160f300708522 · sha256:11901066fcc54dc0… · /containers/cna/affected/1

{"product":"Quantum Security Management","vendor":"checkpoint","versions":[{"status":"affected","version":"R82.10 with Jumbo Hotfix Take 36 or below"},{"status":"affected","version":"R82 with Jumbo Hotfix Take 118 or below"},{"status":"affected","version":"R81.20 with Jumbo Hotfix Take 158 or below"},{"status":"affected","version":"R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1c7a8df24f4f7b36ef8c79f260191a1e68c060cd033c3950dfc160f300708522 · sha256:11901066fcc54dc0… · /containers/cna/affected/0
cvss · 2 assertions

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:1c7a8df24f4f7b36ef8c79f260191a1e68c060cd033c3950dfc160f300708522 · sha256:11901066fcc54dc0… · /containers/adp/0/metrics/0/cvssV3_1

{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:1c7a8df24f4f7b36ef8c79f260191a1e68c060cd033c3950dfc160f300708522 · sha256:11901066fcc54dc0… · /containers/cna/metrics/0/cvssV4_0

Affected products and versions

2 source assertions
{"product":"Multi-Domain Security Management","vendor":"checkpoint","versions":[{"status":"affected","version":"R82.10 with Jumbo Hotfix Take 36 or below"},{"status":"affected","version":"R82 with Jumbo Hotfix Take 118 or below"},{"status":"affected","version":"R81.20 with Jumbo Hotfix Take 158 or below"},{"status":"affected","version":"R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1c7a8df24f4f7b36ef8c79f260191a1e68c060cd033c3950dfc160f300708522 · sha256:11901066fcc54dc0… · /containers/cna/affected/1
{"product":"Quantum Security Management","vendor":"checkpoint","versions":[{"status":"affected","version":"R82.10 with Jumbo Hotfix Take 36 or below"},{"status":"affected","version":"R82 with Jumbo Hotfix Take 118 or below"},{"status":"affected","version":"R81.20 with Jumbo Hotfix Take 158 or below"},{"status":"affected","version":"R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1c7a8df24f4f7b36ef8c79f260191a1e68c060cd033c3950dfc160f300708522 · sha256:11901066fcc54dc0… · /containers/cna/affected/0

Provider-owned CVSS observations

2 source assertions
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:1c7a8df24f4f7b36ef8c79f260191a1e68c060cd033c3950dfc160f300708522 · sha256:11901066fcc54dc0… · /containers/adp/0/metrics/0/cvssV3_1
{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:1c7a8df24f4f7b36ef8c79f260191a1e68c060cd033c3950dfc160f300708522 · sha256:11901066fcc54dc0… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion
{"cweId":"CWE-287","description":"CWE-287: Improper Authentication.","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:1c7a8df24f4f7b36ef8c79f260191a1e68c060cd033c3950dfc160f300708522 · sha256:11901066fcc54dc0… · /containers/cna/problemTypes/0/descriptions/0

Known exploitation assertions

2 source assertions
{"cwes":["CWE-287"],"dateAdded":"2026-07-22","dueDate":"2026-07-25","knownRansomwareCampaignUse":"Unknown","notes":"https://support.checkpoint.com/results/sk/sk185169/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-16232","product":"SmartConsole","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance …
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:0543004f527aaaf9e3d907989d9fc268ec153e98d8de9af35862cfeacd5c5388 · sha256:16acee8334e59e44… · /vulnerabilities/4
    Open source location →
{"cwes":["CWE-287"],"dateAdded":"2026-07-22","dueDate":"2026-07-25","knownRansomwareCampaignUse":"Unknown","notes":"https://support.checkpoint.com/results/sk/sk185169/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-16232","product":"SmartConsole","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance …
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:aa2f6e080d5bea5740e9ff13e1101054cd8a97b0cd15b1ec0be895eeb635ae43 · sha256:635dff916c4092c0… · /vulnerabilities/7
    Open source location →

Source references

2 source assertions
{"url":"https://support.checkpoint.com/results/sk/sk185169"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1c7a8df24f4f7b36ef8c79f260191a1e68c060cd033c3950dfc160f300708522 · sha256:11901066fcc54dc0… · /containers/cna/references/0
{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1c7a8df24f4f7b36ef8c79f260191a1e68c060cd033c3950dfc160f300708522 · sha256:11901066fcc54dc0… · /containers/adp/0/references/0

Attribution and limitations

  • CISA Known Exploited Vulnerabilities JSON: CISA named for provenance; do not use CISA/DHS marks or imply endorsement Source →
  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer