60
sk185169 - CVE-2026-16232 - Authentication bypass with SmartConsole ...
Check Point issued a high-severity alert for CVE-2026-16232, an authentication bypass in the SmartConsole login process via application token.
Check Point published support article sk185169 describing CVE-2026-16232, an authentication bypass affecting the SmartConsole login process when using application tokens. The vendor rates the issue High. The brief advisory text provides no exploitation details, CVSS score, or affected-version list.
45
60
Check Point Vulnerability Lets Remote Hackers Gain Root Access Without Authentication
Check Point patched CVE-2026-91843, a CVSS 9.8 pre-auth stack overflow granting remote root on Security Management and Log Servers.
Check Point released an urgent fix for CVE-2026-91843 (CVSS 3.1: 9.8), a stack-based buffer overflow triggered by an excessively long username during login that lets an unauthenticated remote attacker execute arbitrary code with root privileges. Affected products include Security Management Server, Multi-Domain Security Management Server, and Log Servers across releases from R80 through R82.20, with fixes delivered via LivePatch and urgent Take packages. The vendor reports no observed exploitation in the wild, and administrators are advised to verify patch deployment and restrict SmartConsole Trusted Clients.
70
60