coldbraid

CVE-2026-16232 Checkpoint Quantum Security Management

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows…

CVSS
9.3 Critical
EPSS
3.5%
Percentile
89
Published
2026-07-22
Force
10 of 12
Public PoC
3

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE-287

On CISA’s exploited list

Check Point SmartConsole Improper Authentication Vulnerability

Added
2026-07-22
Federal patch deadline
2026-07-25
Ransomware use
not known