Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2026-16232

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.

Security Impact Summary

This vulnerability carries a CRITICAL severity rating with a CVSS v3.1 score of 9.1, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), for affected systems. Impacting 2 products from checkpoint, from checkpoint organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2026, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2026-07-22T14:17:15.513

Last Modified

2026-08-03T12:15:13.317

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.1 (CRITICAL)

Weaknesses

Type: Secondary
CWE-287

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	checkpoint	multi-domain_security_management	< r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r81.20	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82	Yes
Application	checkpoint	multi-domain_security_management	r82.10	Yes
Application	checkpoint	multi-domain_security_management	r82.10	Yes
Application	checkpoint	multi-domain_security_management	r82.10	Yes
Application	checkpoint	multi-domain_security_management	r82.10	Yes
Application	checkpoint	quantum_security_management	< r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r81.20	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82	Yes
Application	checkpoint	quantum_security_management	r82.10	Yes
Application	checkpoint	quantum_security_management	r82.10	Yes
Application	checkpoint	quantum_security_management	r82.10	Yes
Application	checkpoint	quantum_security_management	r82.10	Yes

References

https://support.checkpoint.com/results/sk/sk185169 Mitigation, Patch, Vendor Advisory ([email protected])
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232 US Government Resource (134c704f-9b21-4f2e-91b3-4a467353bcc0)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For checkpoint's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.