PT-2026-63408

CVE-2026-16232

·

Published

2026-07-14

·

Updated

2026-10-23

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Check Point SmartConsole (affected versions not specified)
Description An authentication bypass in the login process allows an unauthenticated remote attacker to obtain an application login token and authenticate with full administrative privileges. This allows the attacker to modify security policies and security configurations. Exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. This issue has been exploited in a small number of customers.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾