Check Point SmartConsole flaw CVE-2026-16232 under active attack

THE content highlights a critical alert regarding four active exploits detected today, focusing primarily on the Check Point SmartConsole authentication bypass vulnerability, CVE-2026-16232. This flaw allows attackers to bypass login and has been actively exploited, rated 9.3 on the CVSS severity scale. Check Point advises that the risk mainly affects specific configurations directly exposed to the internet. A jumbo hotfix was released on July 22, 2026, alongside fixes for two related vulnerabilities. Users are recommended to restrict access and implement firewall protections until patches are applied.