Skip to content
OriginalSign in
Image: The Hacker News

The Hacker Newsinfo@thehackernews.com (The Hacker News)

Researchers Release PoC for Check Point SmartConsole Auth Bypass

Part of the SmartConsole story · since 22 Jul

Quiet for 13 weekslast report 29 Jul9 articles5 outlets
22 Jul · SecurityOnline first11 Sep28 Sep15 OctNowThis article9th of 9
  • Wed 22 Jul, 19:08 UTC. SecurityOnline, first report. Check Point SmartConsole flaw CVE-2026-16232 under active attack. Cites a CVE in CISA KEV.
  • Wed 22 Jul, 20:20 UTC. CISA, its first report on the story. CISA Flags Active Exploitation of Check Point SmartConsole Flaw. Cites a CVE in CISA KEV.
  • Wed 22 Jul, 22:02 UTC. CISA. CISA flags Check Point SmartConsole flaw in latest KEV update. Cites a CVE in CISA KEV.
  • Thu 23 Jul, 08:31 UTC. The Hacker News, its first report on the story. Check Point patches critical SmartConsole flaw after exploits.
  • Thu 23 Jul, 09:45 UTC. Security Affairs, its first report on the story. Check Point fixes critical SmartConsole auth bypass exploited now. Cites a CVE in CISA KEV.
  • Thu 23 Jul, 13:10 UTC. Rapid7, its first report on the story. CVE-2026-16232 flaw lets hackers access Check Point admin. Cites a CVE in CISA KEV.
  • Thu 23 Jul, 21:01 UTC. Security Affairs. U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.
  • Wed 29 Jul, 08:13 UTC. SecurityOnline. Check Point SmartConsole Authentication Bypass CVE-2026-16232 Exploited as Zero-Day, PoC and Details Public. Cites a CVE in CISA KEV.
  • Wed 29 Jul, 09:29 UTC. The Hacker News. Researchers Release PoC for Check Point SmartConsole Auth Bypass. This article, 9th of 9.

The article discusses the release of a public proof of concept (PoC) for an authentication bypass vulnerability found in Check Point's SmartConsole. This vulnerability, exploited in real-world attacks, raises significant concerns for enterprise security. Organizations are advised to update their systems promptly to mitigate these security risks. The post emphasizes the critical nature of timely patch management in safeguarding digital infrastructures against emerging threats.

How the story developed

All 9 articles
Quiet for 13 weekslast report 29 Jul9 articles5 outlets

9 articles from 5 outlets since 22 Jul. Quiet since 29 Jul. This was the 9th report, 7 days after the first.

Now22 Jul24252627282930First reportSecurityOnline · 22 Jul, 19:08This article9th of 9 · day 7
  • Wed 22 Jul, 19:08 UTC. SecurityOnline, first report. Check Point SmartConsole flaw CVE-2026-16232 under active attack. Cites a CVE in CISA KEV.
  • Wed 22 Jul, 20:20 UTC. CISA, its first report on the story. CISA Flags Active Exploitation of Check Point SmartConsole Flaw. Cites a CVE in CISA KEV.
  • Wed 22 Jul, 22:02 UTC. CISA. CISA flags Check Point SmartConsole flaw in latest KEV update. Cites a CVE in CISA KEV.
  • Thu 23 Jul, 08:31 UTC. The Hacker News, its first report on the story. Check Point patches critical SmartConsole flaw after exploits.
  • Thu 23 Jul, 09:45 UTC. Security Affairs, its first report on the story. Check Point fixes critical SmartConsole auth bypass exploited now. Cites a CVE in CISA KEV.
  • Thu 23 Jul, 13:10 UTC. Rapid7, its first report on the story. CVE-2026-16232 flaw lets hackers access Check Point admin. Cites a CVE in CISA KEV.
  • Thu 23 Jul, 21:01 UTC. Security Affairs. U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.
  • Wed 29 Jul, 08:13 UTC. SecurityOnline. Check Point SmartConsole Authentication Bypass CVE-2026-16232 Exploited as Zero-Day, PoC and Details Public. Cites a CVE in CISA KEV.
  • Wed 29 Jul, 09:29 UTC. The Hacker News. Researchers Release PoC for Check Point SmartConsole Auth Bypass. This article, 9th of 9.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 9 articles as a list
  1. Wed 22 JulDay 03
    1. Check Point SmartConsole flaw CVE-2026-16232 under active attack19:08 · SecurityOnline · First report · Known exploited CVE
    2. CISA Flags Active Exploitation of Check Point SmartConsole Flaw20:20 · CISA · official · CISA alert · Known exploited CVE
    3. CISA flags Check Point SmartConsole flaw in latest KEV update22:02 · CISA · official · Known exploited CVE
  2. Thu 23 JulDay 14
    1. Check Point patches critical SmartConsole flaw after exploits08:31 · The Hacker News
    2. Check Point fixes critical SmartConsole auth bypass exploited now09:45 · Security Affairs · Known exploited CVE
    3. CVE-2026-16232 flaw lets hackers access Check Point admin13:10 · Rapid7 · Known exploited CVE
    4. U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog21:01 · Security Affairs · Known exploited CVE

  3. Quiet for 5 days

    Wed 29 JulDay 72
    1. Check Point SmartConsole Authentication Bypass CVE-2026-16232 Exploited as Zero-Day, PoC and Details Public08:13 · SecurityOnline · Picked up again · Known exploited CVE
    2. Researchers Release PoC for Check Point SmartConsole Auth Bypass09:29 · The Hacker News · This article, 9th of 9

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in