Multi-Domain Management

Check Point Issues Urgent Fixes for Critical Exploited SmartConsole Vulnerability CVE-2026-16232

Check Point has released emergency patches for a critical vulnerability in the SmartConsole login process that is already being actively exploited in real-world attacks. The flaw, tracked as CVE-2026-16232 with a CVSS score of 9.3, allows unauthenticated remote attackers to obtain valid access tokens and gain full administrative privileges over the management environment. Exploitation requires the management server to be directly exposed to the internet without IP address restrictions for trusted clients. The company has confirmed attacks against a small number of customers and notified those affected. The update also addresses two additional vulnerabilities, CVE-2026-62144 and CVE-2026-62145, and is delivered through the Jumbo Hotfix package released on July 22, 2026.