U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added critical vulnerabilities affecting Microsoft SharePoint and Check Point SmartConsole to its Known Exploited Vulnerabilities catalog. The flaws include CVE-2026-16232 (Check Point SmartConsole) with a CVSS score of 9.3, allowing attackers to gain administrative access, and CVE-2026-50522 (Microsoft SharePoint) with a score of 9.8, enabling unauthorized remote code execution. Both vulnerabilities are being actively exploited.

Organizations are urged to apply security updates and implement remediation measures to protect their systems before the deadline of July 25, 2026.

AI summary of the original article from Security Affairs, written automatically by a language model. Quotes, figures and names come from that article; check it before relying on a detail. Read the original · How summaries are made

CVE-2026-16232 coverage
Published (UTC)	Outlet	Headline
Wed 22 Jul · 19:08 UTC	SecurityOnline	Check Point SmartConsole flaw CVE-2026-16232 under active attack
Wed 22 Jul · 20:20 UTC	CISA	CISA Flags Active Exploitation of Check Point SmartConsole Flaw
Wed 22 Jul · 22:02 UTC	CISA	CISA flags Check Point SmartConsole flaw in latest KEV update
Thu 23 Jul · 04:06 UTC	SecurityOnline	GitHub Actions Abused to Steal Credentials from PHP Packages
Thu 23 Jul · 04:07 UTC	SecurityOnline	Two Active BIND Exploits Highlighted as Nine Flaws Patched
Thu 23 Jul · 09:09 UTC	SecurityWeek	Check Point Zero Day CVE-2026-16232 Exploited for Auth Bypass
Thu 23 Jul · 09:45 UTC	Security Affairs	Check Point fixes critical SmartConsole auth bypass exploited now
Thu 23 Jul · 13:10 UTC	Rapid7	CVE-2026-16232 flaw lets hackers access Check Point admin
Thu 23 Jul · 21:01 UTC	Security Affairs	U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog (this article)
Fri 24 Jul · 03:10 UTC	SecurityOnline	Heap overflow bug in Knot Resolver lets attackers run code
Mon 27 Jul · 02:21 UTC	SecurityOnline	UK firms must patch now as CISA flags six active exploits
Wed 29 Jul · 08:13 UTC	SecurityOnline	Check Point SmartConsole Authentication Bypass CVE-2026-16232 Exploited as Zero-Day, PoC and Details Public

CVE-2026-16232 coverage

Published (UTC)

Outlet

Headline

Wed 22 Jul · 19:08 UTC

SecurityOnline

Check Point SmartConsole flaw CVE-2026-16232 under active attack

Wed 22 Jul · 20:20 UTC

CISA

CISA Flags Active Exploitation of Check Point SmartConsole Flaw

Wed 22 Jul · 22:02 UTC

CISA