Authentication bypass in Check Point SmartConsole login process (CVE-2026-16232)

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Check Point has confirmed active exploitation affecting a small number of customers. ⚠️ Actively exploited in the wild (CISA KEV). Affected versions: - R77.30 - R80 - R80.10 - R80.20 - R80.30 - R81 - R81.10 - R81.20 - R82 - R82.10 We recommend updating to: Jumbo Hotfix Accumulator for R82.10 starting from Take 36, Jumbo Hotfix Accumulator for R82 starting from Take 118, Jumbo Hotfix Accumulator for R81.20 starting from Take 158. CVSS 9.1 · our assessment: emergency Reference: https://support.checkpoint.com/results/sk/sk185169 Details: https://vuln.today/cve/CVE-2026-16232