Check Point Patches Actively Exploited SmartConsole Flaw Allowing Full Administrative Access

Check Point has released urgent security updates for three vulnerabilities affecting its firewall and security-management platforms, including a critical SmartConsole authentication bypass that attackers have already exploited against a small number of customers.

The most serious vulnerability, tracked as CVE-2026-16232, could allow an unauthenticated remote attacker to obtain a valid application login token and access a vulnerable Check Point Management Server with full administrative privileges. An intruder reaching that level of access could modify firewall policies, alter security configurations and potentially weaken protections across every gateway controlled by the compromised server.