Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    4 vulnerabilities found for Multi-Domain Security Management by checkpoint

    CVE-2026-62144 (GCVE-0-2026-62144)

    Vulnerability from nvd – Published: 2026-07-22 13:53 – Updated: 2026-07-22 19:30
    VLAI
    Title
    Management Authentication Bypass and Privilege Escalation
    Summary
    An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-287 - Improper Authentication.
    Assigner
    References
    Impacted products
    Vendor Product Version
    checkpoint Quantum Security Management Affected: R82.10 with Jumbo Hotfix Take 36 or below
    Affected: R82 with Jumbo Hotfix Take 118 or below
    Affected: R81.20 with Jumbo Hotfix Take 158 or below
    Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
    Create a notification for this product.
    checkpoint Multi-Domain Security Management Affected: R82.10 with Jumbo Hotfix Take 36 or below
    Affected: R82 with Jumbo Hotfix Take 118 or below
    Affected: R81.20 with Jumbo Hotfix Take 158 or below
    Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 9.1,
                  "baseSeverity": "CRITICAL",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-62144",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-22T19:29:56.651769Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-22T19:30:14.549Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Quantum Security Management",
              "vendor": "checkpoint",
              "versions": [
                {
                  "status": "affected",
                  "version": "R82.10 with Jumbo Hotfix Take 36 or below"
                },
                {
                  "status": "affected",
                  "version": "R82 with Jumbo Hotfix Take 118 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.20 with Jumbo Hotfix Take 158 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
                }
              ]
            },
            {
              "product": "Multi-Domain Security Management",
              "vendor": "checkpoint",
              "versions": [
                {
                  "status": "affected",
                  "version": "R82.10 with Jumbo Hotfix Take 36 or below"
                },
                {
                  "status": "affected",
                  "version": "R82 with Jumbo Hotfix Take 118 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.20 with Jumbo Hotfix Take 158 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients."
            }
          ],
          "metrics": [
            {
              "format": "CVSS",
              "other": {
                "content": {
                  "attackComplexity": "LOW",
                  "attackRequirements": "NONE",
                  "attackVector": "NETWORK",
                  "baseScore": 9.3,
                  "baseSeverity": "CRITICAL",
                  "privilegesRequired": "NONE",
                  "subAvailabilityImpact": "NONE",
                  "subConfidentialityImpact": "NONE",
                  "subIntegrityImpact": "NONE",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                  "version": "4.0",
                  "vulnAvailabilityImpact": "HIGH",
                  "vulnConfidentialityImpact": "HIGH",
                  "vulnIntegrityImpact": "HIGH"
                },
                "type": "CVSSv4.0"
              },
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-287",
                  "description": "CWE-287: Improper Authentication.",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-22T13:57:08.986Z",
            "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
            "shortName": "checkpoint"
          },
          "references": [
            {
              "url": "https://support.checkpoint.com/results/sk/sk185152"
            }
          ],
          "title": "Management Authentication Bypass and Privilege Escalation"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "assignerShortName": "checkpoint",
        "cveId": "CVE-2026-62144",
        "datePublished": "2026-07-22T13:53:35.969Z",
        "dateReserved": "2026-07-13T10:24:07.648Z",
        "dateUpdated": "2026-07-22T19:30:14.549Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-16232 (GCVE-0-2026-16232)

    Vulnerability from nvd – Published: 2026-07-22 13:53 – Updated: 2026-07-22 19:58
    VLAI CISA KEVIntel
    Title
    Authentication Bypass in the SmartConsole Login Process Using an Application Token
    Summary
    An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-287 - Improper Authentication.
    Assigner
    Impacted products
    Vendor Product Version
    checkpoint Quantum Security Management Affected: R82.10 with Jumbo Hotfix Take 36 or below
    Affected: R82 with Jumbo Hotfix Take 118 or below
    Affected: R81.20 with Jumbo Hotfix Take 158 or below
    Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
    Create a notification for this product.
    checkpoint Multi-Domain Security Management Affected: R82.10 with Jumbo Hotfix Take 36 or below
    Affected: R82 with Jumbo Hotfix Take 118 or below
    Affected: R81.20 with Jumbo Hotfix Take 158 or below
    Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 9.1,
                  "baseSeverity": "CRITICAL",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-16232",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-22T19:29:23.246874Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              },
              {
                "other": {
                  "content": {
                    "dateAdded": "2026-07-22",
                    "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
                  },
                  "type": "kev"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-22T19:58:23.301Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "name": "CISA KEV",
                "tags": [
                  "government-resource"
                ],
                "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-07-22T00:00:00.000Z",
                "value": "CVE-2026-16232 added to CISA KEV"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Quantum Security Management",
              "vendor": "checkpoint",
              "versions": [
                {
                  "status": "affected",
                  "version": "R82.10 with Jumbo Hotfix Take 36 or below"
                },
                {
                  "status": "affected",
                  "version": "R82 with Jumbo Hotfix Take 118 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.20 with Jumbo Hotfix Take 158 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
                }
              ]
            },
            {
              "product": "Multi-Domain Security Management",
              "vendor": "checkpoint",
              "versions": [
                {
                  "status": "affected",
                  "version": "R82.10 with Jumbo Hotfix Take 36 or below"
                },
                {
                  "status": "affected",
                  "version": "R82 with Jumbo Hotfix Take 118 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.20 with Jumbo Hotfix Take 158 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers."
            }
          ],
          "metrics": [
            {
              "format": "CVSS",
              "other": {
                "content": {
                  "attackComplexity": "LOW",
                  "attackRequirements": "NONE",
                  "attackVector": "NETWORK",
                  "baseScore": 9.3,
                  "baseSeverity": "CRITICAL",
                  "privilegesRequired": "NONE",
                  "subAvailabilityImpact": "NONE",
                  "subConfidentialityImpact": "NONE",
                  "subIntegrityImpact": "NONE",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                  "version": "4.0",
                  "vulnAvailabilityImpact": "HIGH",
                  "vulnConfidentialityImpact": "HIGH",
                  "vulnIntegrityImpact": "HIGH"
                },
                "type": "CVSSv4.0"
              },
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-287",
                  "description": "CWE-287: Improper Authentication.",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-22T13:57:15.816Z",
            "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
            "shortName": "checkpoint"
          },
          "references": [
            {
              "url": "https://support.checkpoint.com/results/sk/sk185169"
            }
          ],
          "title": "Authentication Bypass in the SmartConsole Login Process Using an Application Token"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "assignerShortName": "checkpoint",
        "cveId": "CVE-2026-16232",
        "datePublished": "2026-07-22T13:53:09.830Z",
        "dateReserved": "2026-07-19T12:14:17.233Z",
        "dateUpdated": "2026-07-22T19:58:23.301Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-62144 (GCVE-0-2026-62144)

    Vulnerability from cvelistv5 – Published: 2026-07-22 13:53 – Updated: 2026-07-22 19:30
    VLAI
    Title
    Management Authentication Bypass and Privilege Escalation
    Summary
    An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-287 - Improper Authentication.
    Assigner
    References
    Impacted products
    Vendor Product Version
    checkpoint Quantum Security Management Affected: R82.10 with Jumbo Hotfix Take 36 or below
    Affected: R82 with Jumbo Hotfix Take 118 or below
    Affected: R81.20 with Jumbo Hotfix Take 158 or below
    Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
    Create a notification for this product.
    checkpoint Multi-Domain Security Management Affected: R82.10 with Jumbo Hotfix Take 36 or below
    Affected: R82 with Jumbo Hotfix Take 118 or below
    Affected: R81.20 with Jumbo Hotfix Take 158 or below
    Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 9.1,
                  "baseSeverity": "CRITICAL",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-62144",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-22T19:29:56.651769Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-22T19:30:14.549Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Quantum Security Management",
              "vendor": "checkpoint",
              "versions": [
                {
                  "status": "affected",
                  "version": "R82.10 with Jumbo Hotfix Take 36 or below"
                },
                {
                  "status": "affected",
                  "version": "R82 with Jumbo Hotfix Take 118 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.20 with Jumbo Hotfix Take 158 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
                }
              ]
            },
            {
              "product": "Multi-Domain Security Management",
              "vendor": "checkpoint",
              "versions": [
                {
                  "status": "affected",
                  "version": "R82.10 with Jumbo Hotfix Take 36 or below"
                },
                {
                  "status": "affected",
                  "version": "R82 with Jumbo Hotfix Take 118 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.20 with Jumbo Hotfix Take 158 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients."
            }
          ],
          "metrics": [
            {
              "format": "CVSS",
              "other": {
                "content": {
                  "attackComplexity": "LOW",
                  "attackRequirements": "NONE",
                  "attackVector": "NETWORK",
                  "baseScore": 9.3,
                  "baseSeverity": "CRITICAL",
                  "privilegesRequired": "NONE",
                  "subAvailabilityImpact": "NONE",
                  "subConfidentialityImpact": "NONE",
                  "subIntegrityImpact": "NONE",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                  "version": "4.0",
                  "vulnAvailabilityImpact": "HIGH",
                  "vulnConfidentialityImpact": "HIGH",
                  "vulnIntegrityImpact": "HIGH"
                },
                "type": "CVSSv4.0"
              },
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-287",
                  "description": "CWE-287: Improper Authentication.",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-22T13:57:08.986Z",
            "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
            "shortName": "checkpoint"
          },
          "references": [
            {
              "url": "https://support.checkpoint.com/results/sk/sk185152"
            }
          ],
          "title": "Management Authentication Bypass and Privilege Escalation"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "assignerShortName": "checkpoint",
        "cveId": "CVE-2026-62144",
        "datePublished": "2026-07-22T13:53:35.969Z",
        "dateReserved": "2026-07-13T10:24:07.648Z",
        "dateUpdated": "2026-07-22T19:30:14.549Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-16232 (GCVE-0-2026-16232)

    Vulnerability from cvelistv5 – Published: 2026-07-22 13:53 – Updated: 2026-07-22 19:58
    VLAI CISA KEVIntel
    Title
    Authentication Bypass in the SmartConsole Login Process Using an Application Token
    Summary
    An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-287 - Improper Authentication.
    Assigner
    Impacted products
    Vendor Product Version
    checkpoint Quantum Security Management Affected: R82.10 with Jumbo Hotfix Take 36 or below
    Affected: R82 with Jumbo Hotfix Take 118 or below
    Affected: R81.20 with Jumbo Hotfix Take 158 or below
    Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
    Create a notification for this product.
    checkpoint Multi-Domain Security Management Affected: R82.10 with Jumbo Hotfix Take 36 or below
    Affected: R82 with Jumbo Hotfix Take 118 or below
    Affected: R81.20 with Jumbo Hotfix Take 158 or below
    Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 9.1,
                  "baseSeverity": "CRITICAL",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-16232",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-22T19:29:23.246874Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              },
              {
                "other": {
                  "content": {
                    "dateAdded": "2026-07-22",
                    "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
                  },
                  "type": "kev"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-22T19:58:23.301Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "name": "CISA KEV",
                "tags": [
                  "government-resource"
                ],
                "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2026-07-22T00:00:00.000Z",
                "value": "CVE-2026-16232 added to CISA KEV"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Quantum Security Management",
              "vendor": "checkpoint",
              "versions": [
                {
                  "status": "affected",
                  "version": "R82.10 with Jumbo Hotfix Take 36 or below"
                },
                {
                  "status": "affected",
                  "version": "R82 with Jumbo Hotfix Take 118 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.20 with Jumbo Hotfix Take 158 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
                }
              ]
            },
            {
              "product": "Multi-Domain Security Management",
              "vendor": "checkpoint",
              "versions": [
                {
                  "status": "affected",
                  "version": "R82.10 with Jumbo Hotfix Take 36 or below"
                },
                {
                  "status": "affected",
                  "version": "R82 with Jumbo Hotfix Take 118 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.20 with Jumbo Hotfix Take 158 or below"
                },
                {
                  "status": "affected",
                  "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers."
            }
          ],
          "metrics": [
            {
              "format": "CVSS",
              "other": {
                "content": {
                  "attackComplexity": "LOW",
                  "attackRequirements": "NONE",
                  "attackVector": "NETWORK",
                  "baseScore": 9.3,
                  "baseSeverity": "CRITICAL",
                  "privilegesRequired": "NONE",
                  "subAvailabilityImpact": "NONE",
                  "subConfidentialityImpact": "NONE",
                  "subIntegrityImpact": "NONE",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                  "version": "4.0",
                  "vulnAvailabilityImpact": "HIGH",
                  "vulnConfidentialityImpact": "HIGH",
                  "vulnIntegrityImpact": "HIGH"
                },
                "type": "CVSSv4.0"
              },
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-287",
                  "description": "CWE-287: Improper Authentication.",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-22T13:57:15.816Z",
            "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
            "shortName": "checkpoint"
          },
          "references": [
            {
              "url": "https://support.checkpoint.com/results/sk/sk185169"
            }
          ],
          "title": "Authentication Bypass in the SmartConsole Login Process Using an Application Token"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "assignerShortName": "checkpoint",
        "cveId": "CVE-2026-16232",
        "datePublished": "2026-07-22T13:53:09.830Z",
        "dateReserved": "2026-07-19T12:14:17.233Z",
        "dateUpdated": "2026-07-22T19:58:23.301Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }