Check Point SmartConsole 0-Day Exploited to Gain Full Administrator Access

Cybersecuritynews •Guru Baran • July 29, 2026

A critical authentication bypass in SmartConsole that was actively exploited as a zero-day before patches were available. Tracked as CVE-2026-16232, the flaw affects Security Management Server and Multi-Domain Security Management Server (MDS) and can give an unauthenticated attacker full administrator access through the SmartConsole management interface. On July 22, 2026, Check Point published a security […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Zero-Day Vulnerability in Check Point SmartConsole Exploited On July 22, 2026, Check Point disclosed CVE-2026-16232, a critical authentication bypass vulnerability in SmartConsole affecting Security Management Server and Multi-Domain Security Management Server (MDS). This flaw allows unauthenticated attackers to gain full administrative access by exploiting the SmartConsole login process. The vulnerability is actively exploited in the wild as a zero-day, with a proof-of-concept (PoC) exploit available. Exploitation requires network access to the Management Server and a default Trusted Clients configuration. Check Point has confirmed that patches are available to remediate this vulnerability. Security professionals are urged to apply the patches immediately to mitigate risks. The vulnerability was reported to have been actively exploited before the patches were released. 5 sources 73

Extracted Entities

Check Point SmartConsole 0-Day Exploited to Gain Full Administrator Access

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)