vulnerability · Fri 24 Jul 2026 · 21:11 UTC
Actively exploited[KEV] CVE-2026-16232: Check Point SmartConsole Improper Authentication Vulnerability
Filed UTCSource THN ↗
Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.
Signals
as the pipeline stamped them- KEV
- Active exploitation (KEV)
- What to do
- On CISA KEV — actively exploited. Patch immediately.
CISA KEV means this flaw has been seen exploited in real attacks — not predicted, observed. Treat it as urgent regardless of its score.
CVE
KEV from CISA · EPSS from FIRST| Id | KEV | EPSS | Reference |
|---|---|---|---|
| CVE-2026-16232 | KEV | 78% | NVD ↗ |
Get the next one first.
Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.