News Summary

• Vulnerability is an authentication bypass in the SmartConsole login process.
• Check Point has disclosed that it's aware of a handful of customers being targeted by this flaw as a zero-day.
• Customers are advised to apply the Jumbo Hotfixes released by Check Point on July 22, 2026, to remediate the flaw as soon as possible.
• "By leveraging CVE-2026-16232, an unauthenticated attacker can obtain an application login token, use this token to log in through SmartConsole with full administrator privileges," Rapid7 said.