CVE-2026-16232 Authentication Bypass in the SmartConsole Login Process Using an Application Token

🗓️ 22 Jul 2026 13:53:09Reported by checkpointType

CVE-2026-16232 enables unauthenticated token access to gain full administrative rights in SmartConsole, enabling policy changes.

Reporter	Title	Published	Views	Family All 20
GithubExploit	Exploit for Improper Authentication in Checkpoint Multi-Domain_Security_Management	28 Jul 202616:19	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Checkpoint Multi-Domain_Security_Management	3 Aug 202612:55	–	githubexploit
ATTACKERKB	CVE-2026-16232	22 Jul 202613:53	–	attackerkb
BDU FSTEC	The vulnerability of the Check Point SmartConsole application for managing security systems, related to authentication procedures that have flaws, allows attackers to bypass existing security mechanisms and execute arbitrary code.	27 Jul 202600:00	–	bdu_fstec
Tenable Nessus	Check Point Gaia Operating System (sk185169)	29 Jul 202600:00	–	nessus
Circl	CVE-2026-16232	22 Jul 202616:00	–	circl
CISA KEV Catalog	Check Point SmartConsole Improper Authentication Vulnerability	22 Jul 202600:00	–	cisa_kev
CheckPoint Security	CVE-2026-16232 - Authentication bypass with SmartConsole login process using application token	19 Jul 202600:00	–	checkpoint_security
CVE	CVE-2026-16232	22 Jul 202613:53	–	cve
EUVD	EUVD-2026-47700	22 Jul 202613:53	–	euvd

[
  {
    "product": "Quantum Security Management",
    "vendor": "checkpoint",
    "versions": [
      {
        "status": "affected",
        "version": "R82.10 with Jumbo Hotfix Take 36 or below"
      },
      {
        "status": "affected",
        "version": "R82 with Jumbo Hotfix Take 118 or below"
      },
      {
        "status": "affected",
        "version": "R81.20 with Jumbo Hotfix Take 158 or below"
      },
      {
        "status": "affected",
        "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
      }
    ]
  },
  {
    "product": "Multi-Domain Security Management",
    "vendor": "checkpoint",
    "versions": [
      {
        "status": "affected",
        "version": "R82.10 with Jumbo Hotfix Take 36 or below"
      },
      {
        "status": "affected",
        "version": "R82 with Jumbo Hotfix Take 118 or below"
      },
      {
        "status": "affected",
        "version": "R81.20 with Jumbo Hotfix Take 158 or below"
      },
      {
        "status": "affected",
        "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
      }
    ]
  }
]

Source	Link
support	www.support.checkpoint.com/results/sk/sk185169

02 Aug 2026 07:06Current

CVSS 49.3

EPSS0.73296

CWE-287