Fixing and finding
Jump to remediation plan
CVE ID
CVE-2026-16232
Published 2026-07-22
Updated last month
Vendor/s
Check Point
Product/s
SmartConsole
Version/s
r77.30 > r81.20
KEV Status
Active Exploitation
Listed in CISA's Known Exploited Vulnerabilities catalog. Active
exploitation observed in the wild.
CVSS Score (v3.1)
9.8
/ 10
Critical
Severity Details
Base score
9.8 Critical
Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Description
Critical CVSS 9.1 authentication bypass in Check Point SmartConsole allows full admin access. Actively exploited in the wild. Patch immediately.
CPE
Check Point
| Product | Version Start | Version End (excl.) | Status |
|---|---|---|---|
| multi-domain_security_management | r77.30 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r81.20 | r81.20 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82 | r82 | vulnerable |
| multi-domain_security_management | r82.10 | r82.10 | vulnerable |
| multi-domain_security_management | r82.10 | r82.10 | vulnerable |
| multi-domain_security_management | r82.10 | r82.10 | vulnerable |
| multi-domain_security_management | r82.10 | r82.10 | vulnerable |
| quantum_security_management | r77.30 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r81.20 | r81.20 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82 | r82 | vulnerable |
| quantum_security_management | r82.10 | r82.10 | vulnerable |
| quantum_security_management | r82.10 | r82.10 | vulnerable |
| quantum_security_management | r82.10 | r82.10 | vulnerable |
| quantum_security_management | r82.10 | r82.10 | vulnerable |
Related weakness (CWE)
CWE-287
Remediation plan
1
Apply official patches
Immediately install the security hotfixes provided by Check Point for your management version. Consult Check Point support advisory sk185169 for specific patch identifiers and installation procedures.
2
Update affected systems
Ensure all Quantum and Multi-Domain Security Management instances are updated to non-vulnerable versions. This includes addressing affected releases across the r77.30, r80.x, r81.x, and r82.x product lines.
3
Restrict access
Modify the 'Trusted Clients' configuration to strictly limit Management Server access to known, authorized administrative IP addresses. Ensure the management interface is not reachable from the public internet.
4
Monitor for exploitation
Conduct a thorough review of SmartConsole audit logs for unauthorized policy changes or suspicious administrative logins. Follow CISA’s Forensics Triage Requirements to identify signs of active compromise.
Detection Guidance
"Monitor management server logs for successful SmartConsole authentication events originating from unauthorized or external IP addresses. Look for the generation of administrative tokens that do not correlate with legitimate staff activity. Audit security policy revision history for unexpected modifications or the creation of new administrative accounts. Network-level detection should focus on identifying unusual traffic patterns to the Management Server, particularly on ports used for SmartConsole communication."
References
Sources
NIST National Vulnerability Database (NVD)
CISA Known Exploited Vulnerabilities (KEV)