Check Point SmartConsole Zero-Day Lets Unauthenticated Attackers Gain Full Admin Access

A critical authentication bypass vulnerability in Check Point’s SmartConsole management platform allows unauthenticated attackers to seize full administrator control over Security Management Servers. Tracked as CVE-2026-16232 , the flaw was disclosed by Check Point on July 22, 2026, and affects both Security Management Server and Multi-Domain Security Management Server (MDS) deployments. Rapid7 confirmed the vulnerability is being actively exploited in the wild as a…