CVE-2026-16232: Check Point SmartConsole Improper Authentication

Check Point SmartConsole Improper Authentication Vulnerability. Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.

• CISA KEV-listed (remediation due 2026-07-25)
• EPSS 12.7% (95.8% percentile)
• CVSS 9.1 critical

Related briefings

• Hackers exploit a critical Check Point flaw to hijack management servers 2026-07-25

Browse the CVE database

Read the full analysis on IntelFusions