CVE-2026-16232 - Authentication bypass with SmartConsole login process using application token

Symptoms - Impact: An unauthenticated attacker can obtain an application login token and use it to login via SmartConsole with full admin privileges and apply changes to the security policy and security configuration. Check Point is aware that this vulnerability is being exploited, impacting a ve...

VulnCheck KEV: CVE-2026-16232

Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges...

PT-2026-63408

Name of the Vulnerable Software and Affected Versions Check Point SmartConsole affected versions not specified Description An authentication bypass in the login process allows an unauthenticated remote attacker to obtain an application login token and authenticate with full administrative...

The vulnerability of the Check Point SmartConsole application for managing security systems, related to an uncontrolled search element, allows a perpetrator to execute arbitrary code.

The vulnerability of the Check Point SmartConsole application for managing security systems is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

EUVD-2020-27178

Malware in sbrugna...

EUVD-2024-22278

Malicious code in bioql PyPI...

CVE-2024-24915

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them...

CVE-2024-24915

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them...

CVE-2024-24915 SmartConsole Sensitive Credential Exposure via Memory Dump

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them...

CVE-2024-24915 SmartConsole Sensitive Credential Exposure via Memory Dump

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them...

CVE-2024-24915

CVE-2024-24915 affects Check Point SmartConsole. Credentials are not cleared from memory after use, enabling an administrator to perform a memory dump of the SmartConsole process and fetch sensitive data. Exploitation context: an Administrator with local access can access credentials via a memory...

Check Point SmartConsole 安全漏洞

Check Point SmartConsole is a graphical user interface for centralized management of Check Point security products from Check Point Israel. A security vulnerability exists in Check Point SmartConsole that originates from credentials not being cleared from memory after use, which could lead to an...

CVE-2024-24915: Cleartext Storage of Sensitive Information in Memory

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them...

PT-2025-27361 · Unknown · Smartconsole

Name of the Vulnerable Software and Affected Versions: SmartConsole affected versions not specified Description: The issue arises because credentials are not properly cleared from memory after use. An attacker with Administrator permissions can exploit this by executing a memory dump of the...

PT-2025-26216 · Check Point · Check Point Smartconsole

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges admin. Recommendations: At the moment,...

Check Point SmartConsole 安全漏洞

Check Point SmartConsole is a graphical user interface for centralized management of Check Point security products from Check Point Israel. A security vulnerability exists in Check Point SmartConsole versions R81.10 and R81.20 that originates from an untrusted DLL in the installer directory that...

CVE-2024-24915 - Potential vulnerability in SmartConsole where an administrator's credentials may be exposed to users with debugging privileges on the administrator's computer

Symptoms - Credentials are not cleared from memory after being used. A user with Administrator permissions can execute a memory dump for the SmartConsole process and fetch them. - This issue received the ID CVE-2024-24915. Solution This problem was fixed. The fix is included starting from: R82...

CVE-2020-6024

Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation due to running executables from a directory with write access to all authenticated users...

Check Point Response to CVE-2024-24916 - DLL HiJacking

Cause The installer relies on the default Windows DLL search order, which includes the current working directory. If required DLLs are missing or not explicitly loaded from a secure path, this can lead to DLL hijacking. Symptoms - Untrusted DLLs in the installer's directory may be loaded and...

CVE-2020-6024

Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation due to running executables from a directory with write access to all authenticated users...