Back Feeds.4Sysops Critical authentication bypass in Check Point SmartConsole under active exploitation
Check Point has disclosed a critical zero-day vulnerability, tracked as CVE-2026-16232, affecting its SmartConsole GUI admin panel. This flaw allows unauthenticated remote attackers to obtain an application login token, granting them full administrative control over Security Management and Multi-Domain Security Management servers. By exploiting this, unauthorized actors can modify security policies and configurations on compromised systems. Source
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
