Check Point Software Technologies has revealed a critical vulnerability in its security management products that permits authentication bypass and has already been exploited in real-world attacks.
The issue, identified as CVE-2026-16232, carries a High severity rating. It stems from a flaw in the SmartConsole login process that allows an attacker with network access to the Management Server to obtain administrator rights without providing valid credentials.
Once administrative access is achieved, threat actors could modify security settings, alter policies, and potentially compromise the entire protected environment.
The vulnerability affects the following appliance software versions: R82.10, R82, and R81.20. Older releases, including R77.30 and subsequent unsupported versions, are also impacted.
Check Point released its official security advisory on July 19, 2026, and strongly recommends that customers investigate possible intrusions and implement the necessary updates or workarounds without delay.
