Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come under active exploitation in the wild. The security flaw, tracked as CVE-2026-16232 (CVSS score: 9.3), is an authentication bypass affecting the Check Point SmartConsole login process that allows an

The article reports that Check Point patched a critical authentication bypass vulnerability in SmartConsole (CVE-2026-16232) that allowed unauthenticated remote attackers to obtain an application login token and gain full administrative access to Security Management and Multi-Domain Management servers when management interfaces were directly exposed to the internet without IP restrictions.[1][4][7] The flaw is under active exploitation against a small subset of customers and has been remediated via new Jumbo Hotfix takes and configuration guidance, including restricting trusted clients and management access at the firewall.[1][7] From a RealGround perspective, this is a classic software supply chain and management-plane exposure risk: any AI-powered or automated agents that rely on Check Point APIs or management data could inherit compromise if the underlying SmartConsole management layer is breached. Organizations should treat security management consoles as critical dependencies in their AI/automation stack, ensure rapid patching and strict network access control, and include such third-party management components in their AI SBOM, supply chain reviews, and continuous security te