Check Point SmartConsole Authentication Bypass Reported Under Active Exploitation

Check Point released a security update addressing multiple vulnerabilities affecting Security Management, Multi-Domain Security Management, and Security Gateways, according to a July 26 notice from EG-FinCIRT. The notice identifies CVE-2026-16232, a critical SmartConsole authentication bypass with a reported CVSS score of 9.3, and states that Check Point is aware of active exploitation in the wild. It also lists CVE-2026-62144 and CVE-2026-62145; collectively, the vulnerabilities could enable security restriction bypass, privilege escalation, arbitrary command execution, or access to affected systems.

EG-FinCIRT recommends deploying the patch as soon as testing is complete. Organizations using the affected product families should prioritize checking their deployments against Check Point’s official security advisories and applying applicable fixes. The supplied references do not establish affected versions, exploitation methods, or indicators of compromise, so responders should confirm those details through the vendor before defining exposure and investigation scope.