CVE-2026-16232: Checkpoint Quantum Security Management auth bypass ...
Found by web discovery while looking for coverage of CVE-2026-16232
Attackers exploit Check Point SmartConsole authentication bypass CVE-2026-16232 to take over Quantum Security Management firewall servers; CISA added it to KEV.
CVE-2026-16232 is an authentication bypass (CWE-287) in the SmartConsole login process of Check Point Quantum Security Management, exploitable via an application token. Disclosed July 22, 2026, it was added to CISA's Known Exploited Vulnerabilities catalog the same day with remediation due July 25. Rapid7, Check Point Research and other vendors confirmed exploitation in the wild, and a public PoC was released. A workaround is available, and federal agencies must comply with BOD 26-04 patching guidance.
- Auth bypass in SmartConsole login enables takeover of firewall management servers
- Added to CISA KEV on July 22, 2026 with a 3-day remediation deadline
- Public PoC released; in-the-wild exploitation confirmed by multiple vendors
- Workaround available; BOD 26-04 requirements apply to federal agencies
- CVEs
- CVE-2026-16232
- Vendors
- Check PointCISA
- Organizations
- Rapid7
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-16232 | Authentication Bypass in Check Point SmartConsole Grants Full Admin Access | 9.3 | 4% | KEV | KEV |
From the original article
2 min read at cve.tools
CVE-2026-16232 is an authentication bypass in the SmartConsole login process where an unauthenticated remote attacker can obtain an application login token and then authenticate with full administrative privileges; it is confirmed in the CISA KEV and being exploited in the wild.
By Pavel Buchnev · cve.tools
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.