Vulnerability-Lookup

CVE-2026-16232 (GCVE-0-2026-16232)

Vulnerability from cvelistv5 – Published: 2026-07-22 13:53 – Updated: 2026-07-23 03:55

CISA CIRCL KEVIntel

Title

Authentication Bypass in the SmartConsole Login Process Using an Application Token

Summary

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: active Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-287 - Improper Authentication.

Assigner

checkpoint

References

2 references

URL	Tags
https://support.checkpoint.com/results/sk/sk185169
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

2 products

Vendor	Product	Version
checkpoint	Quantum Security Management	Affected: R82.10 with Jumbo Hotfix Take 36 or below Affected: R82 with Jumbo Hotfix Take 118 or below Affected: R81.20 with Jumbo Hotfix Take 158 or below Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
checkpoint	Multi-Domain Security Management	Affected: R82.10 with Jumbo Hotfix Take 36 or below Affected: R82 with Jumbo Hotfix Take 118 or below Affected: R81.20 with Jumbo Hotfix Take 158 or below Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 9c2482f3-08b1-4e5d-a842-b90ae28e7228

Vulnerability ID: CVE-2026-16232

Status: Confirmed

Status Updated: 2026-07-22 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2026-07-22

Asserted: 2026-07-22

Scope

Notes: Check Point SmartConsole Improper Authentication Vulnerability | Affected: Check Point / SmartConsole | Description: Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. | Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. | Due date: 2026-07-25 | Known ransomware campaign use (KEV): Unknown | Notes (KEV): https://support.checkpoint.com/results/sk/sk185169/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-16232

Evidence

Type: Vendor Report

Signal: Successful Exploitation

Confidence: 80%

Source: cisa-kev

Details

Cwes	CWE-287
Feed	CISA Known Exploited Vulnerabilities Catalog
Product	SmartConsole
Due Date	2026-07-25
Date Added	2026-07-22
Vendorproject	Check Point
Vulnerabilityname	Check Point SmartConsole Improper Authentication Vulnerability
Knownransomwarecampaignuse	Unknown

References

CVE-2026-16232

Created: 2026-07-22 20:00 UTC | Updated: 2026-07-22 20:00 UTC

CIRCL

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 4ede9eb5-9040-4deb-b05a-acc86a2ccd90

Vulnerability ID: CVE-2026-16232

Status: Confirmed

Status Updated: 2026-07-29 08:41 UTC

Exploited: Yes

Characteristics

Local Access Required: Remote

Timestamps

First Seen: 2026-07-29

Asserted: 2026-07-29

Last Seen: 2026-07-29

Created: 2026-07-29 08:41 UTC | Updated: 2026-07-29 08:41 UTC

KEVIntel

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: d66db7d5-24d6-4124-9455-9bff341e18ce

Vulnerability ID: CVE-2026-16232

Status: Confirmed

Status Updated: 2026-07-22 15:57 UTC

Exploited: Yes

Timestamps

First Seen: 2026-07-22

Asserted: 2026-07-22

Scope

Notes: Authentication Bypass in the SmartConsole Login Process Using an Application Token | Affected: checkpoint / Quantum Security Management, Multi-Domain Security Management | Used in malware: unknown | Not yet in CISA KEV: True

Evidence

Type: Public Report

Signal: Successful Exploitation

Confidence: 70%

Source: kevintel

Details

Feed	KEVIntel (kevintel.com)
Title	Authentication Bypass in the SmartConsole Login Process Using an Application Token
Vendor	checkpoint
Product	Quantum Security Management, Multi-Domain Security Management
Added Date	2026-07-22T15:57:00.000Z
Cvss Score	None
Epss Score	None
Cvss Severity	None
Epss Percentile	None
Used In Malware	unknown
Ahead Of Cisa Kev	None
Not Yet In Cisa Kev	True

References

Created: 2026-07-22 16:00 UTC | Updated: 2026-07-22 16:00 UTC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-16232",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-07-22",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T03:55:51.269Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-07-22T00:00:00.000Z",
            "value": "CVE-2026-16232 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        },
        {
          "product": "Multi-Domain Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers."
        }
      ],
      "metrics": [
        {
          "format": "CVSS",
          "other": {
            "content": {
              "attackComplexity": "LOW",
              "attackRequirements": "NONE",
              "attackVector": "NETWORK",
              "baseScore": 9.3,
              "baseSeverity": "CRITICAL",
              "privilegesRequired": "NONE",
              "subAvailabilityImpact": "NONE",
              "subConfidentialityImpact": "NONE",
              "subIntegrityImpact": "NONE",
              "userInteraction": "NONE",
              "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "version": "4.0",
              "vulnAvailabilityImpact": "HIGH",
              "vulnConfidentialityImpact": "HIGH",
              "vulnIntegrityImpact": "HIGH"
            },
            "type": "CVSSv4.0"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication.",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-22T13:57:15.816Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk185169"
        }
      ],
      "title": "Authentication Bypass in the SmartConsole Login Process Using an Application Token"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2026-16232",
    "datePublished": "2026-07-22T13:53:09.830Z",
    "dateReserved": "2026-07-19T12:14:17.233Z",
    "dateUpdated": "2026-07-23T03:55:51.269Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2026-16232",
      "cwes": "[\"CWE-287\"]",
      "dateAdded": "2026-07-22",
      "dueDate": "2026-07-25",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://support.checkpoint.com/results/sk/sk185169/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-16232",
      "product": "SmartConsole",
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
      "shortDescription": "Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.",
      "vendorProject": "Check Point",
      "vulnerabilityName": "Check Point SmartConsole Improper Authentication Vulnerability"
    },
    "epss": {
      "cve": "CVE-2026-16232",
      "date": "2026-07-28",
      "epss": "0.12685",
      "percentile": "0.95846"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-16232\",\"sourceIdentifier\":\"cve@checkpoint.com\",\"published\":\"2026-07-22T14:17:15.513\",\"lastModified\":\"2026-07-23T15:44:54.743\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.\"}],\"affected\":[{\"source\":\"cve@checkpoint.com\",\"affectedData\":[{\"vendor\":\"checkpoint\",\"product\":\"Quantum Security Management\",\"versions\":[{\"version\":\"R82.10 with Jumbo Hotfix Take 36 or below\",\"status\":\"affected\"},{\"version\":\"R82 with Jumbo Hotfix Take 118 or below\",\"status\":\"affected\"},{\"version\":\"R81.20 with Jumbo Hotfix Take 158 or below\",\"status\":\"affected\"},{\"version\":\"R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30\",\"status\":\"affected\"}]},{\"vendor\":\"checkpoint\",\"product\":\"Multi-Domain Security Management\",\"versions\":[{\"version\":\"R82.10 with Jumbo Hotfix Take 36 or below\",\"status\":\"affected\"},{\"version\":\"R82 with Jumbo Hotfix Take 118 or below\",\"status\":\"affected\"},{\"version\":\"R81.20 with Jumbo Hotfix Take 158 or below\",\"status\":\"affected\"},{\"version\":\"R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":5.2}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-07-22T00:00:00+00:00\",\"id\":\"CVE-2026-16232\",\"options\":[{\"exploitation\":\"active\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"cisaExploitAdd\":\"2026-07-22\",\"cisaActionDue\":\"2026-07-25\",\"cisaRequiredAction\":\"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\",\"cisaVulnerabilityName\":\"Check Point SmartConsole Improper Authentication Vulnerability\",\"weaknesses\":[{\"source\":\"cve@checkpoint.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-287\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"r77.30\",\"versionEndExcluding\":\"r81.20\",\"matchCriteriaId\":\"831A6FD2-2397-40FC-8967-50F52E820F03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"60E5A48C-4ABB-46DB-BA75-132AFB408BC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_10:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD16B955-141C-4F13-A9BC-6CCCD96248B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_101:*:*:*:*:*:*\",\"matchCriteriaId\":\"F70DA99D-131C-46CC-B582-CB9419DB1B64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_103:*:*:*:*:*:*\",\"matchCriteriaId\":\"B06457A0-ED12-4412-BB1D-1D24E0C751EA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_105:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD7D44D8-C2D1-46C4-B9E4-29664BCFEAB4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_111:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A7EF92D-B4CC-4868-9026-8F5DA0D14DFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_113:*:*:*:*:*:*\",\"matchCriteriaId\":\"4347D905-4E57-4D64-9B57-C406A70DC0C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_115:*:*:*:*:*:*\",\"matchCriteriaId\":\"12E1E158-790D-40D4-81FF-622307C4524E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_118:*:*:*:*:*:*\",\"matchCriteriaId\":\"01DA6EEA-746F-4EB2-81C5-F7C064519D44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_119:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD575960-0B66-48F9-BC9D-6F7DAEF0BCBC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_120:*:*:*:*:*:*\",\"matchCriteriaId\":\"776DF4D6-9CC1-4BC2-93D0-9DE2405716EA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_122:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0AABCDA-255E-4096-8DEF-483E0373E7F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_126:*:*:*:*:*:*\",\"matchCriteriaId\":\"236CB75E-705A-46B3-A531-29E343AA024A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_127:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1A5645A-D22D-4B5B-86FA-29642111FEDF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_14:*:*:*:*:*:*\",\"matchCriteriaId\":\"B90AA06D-C905-4811-A93A-44F787563FB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_141:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A1BC954-296C-4A94-847D-479825CDA84C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_146:*:*:*:*:*:*\",\"matchCriteriaId\":\"BADA45FE-319D-421F-B4B6-D221D78B69CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_24:*:*:*:*:*:*\",\"matchCriteriaId\":\"CBA6E4FC-BDCC-425F-9D69-E9183548893A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_26:*:*:*:*:*:*\",\"matchCriteriaId\":\"6DF70422-7897-49CC-8874-A96D4CA64E11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_38:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3240200-0517-43FD-BED2-D8AF844BF6E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_41:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE6FBF0A-195F-4E52-9FBF-CD9A71EF3A36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_43:*:*:*:*:*:*\",\"matchCriteriaId\":\"57B969D9-DCC0-4B06-818F-CE2521C4C0C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_45:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA897E69-E1CE-45A1-A0DB-A7BF444484F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_53:*:*:*:*:*:*\",\"matchCriteriaId\":\"A13B8B4D-D746-432A-8833-BDF3A5A13CB4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_54:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF0A7585-591D-4FA1-941E-55FB0207C207\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_65:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A5B10FC-D9B5-4BB2-AD82-0B9AFB2AD0DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_70:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECE1DDA0-9A0A-44D5-919E-24810E7131B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_76:*:*:*:*:*:*\",\"matchCriteriaId\":\"491F74B1-998F-459A-A27D-EB01597C9B01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_79:*:*:*:*:*:*\",\"matchCriteriaId\":\"A31115EC-8018-4EF3-B5D0-0F1EA2392680\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_8:*:*:*:*:*:*\",\"matchCriteriaId\":\"E415D02C-B30A-4210-8F14-47ABF46D4E64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_84:*:*:*:*:*:*\",\"matchCriteriaId\":\"27AED864-AC5B-4FCF-9FD7-6E0D49569BB2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_89:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABF3E632-8D50-4373-9576-0E710511D21B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_90:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6229824-D7A7-439E-9FDD-95F753061410\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_92:*:*:*:*:*:*\",\"matchCriteriaId\":\"B218B25D-7722-435C-AA22-B5411E786277\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_96:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A49ABD5-57B9-4E06-AFFE-8A1269BB16C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_98:*:*:*:*:*:*\",\"matchCriteriaId\":\"3BFA1E0F-A214-4150-A0BD-44B5424A667E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_99:*:*:*:*:*:*\",\"matchCriteriaId\":\"265683A2-DA16-4CDC-AE9D-CE14BAB28A79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D16C37E-3064-4E15-8590-3B3020E4FF7E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_10:*:*:*:*:*:*\",\"matchCriteriaId\":\"C01C66D8-5B48-4255-8246-9301EEA863DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_103:*:*:*:*:*:*\",\"matchCriteriaId\":\"22A0D74F-5216-40D9-B07C-8789A8E2D328\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_107:*:*:*:*:*:*\",\"matchCriteriaId\":\"F2C763B7-B4BD-4915-A33B-9675DC2A1EA5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_12:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC227225-ECF6-4025-B288-992ADE9B6B4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_14:*:*:*:*:*:*\",\"matchCriteriaId\":\"673F8F1B-E64E-44D1-A793-F2B4ED56DDBD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_18:*:*:*:*:*:*\",\"matchCriteriaId\":\"927823EC-B157-4B5C-A4A3-F9D249C88E2C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_19:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DBDDAA3-3CA1-4490-8D43-C8C5C5188A6E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_25:*:*:*:*:*:*\",\"matchCriteriaId\":\"73AEA72B-8E44-4839-8651-5076EBC609B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_33:*:*:*:*:*:*\",\"matchCriteriaId\":\"B11AA664-F3C8-44A6-AD11-14AF6AFAD2E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_34:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D511D85-A534-49A5-A9AE-88BC624311B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_36:*:*:*:*:*:*\",\"matchCriteriaId\":\"B0A2B178-FC15-4D76-9075-D605F87F350D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_39:*:*:*:*:*:*\",\"matchCriteriaId\":\"1360EBA1-B59B-472E-9019-9EB560A05699\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_41:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1301887-F38A-4FE6-9614-1FCF8FDE681C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_43:*:*:*:*:*:*\",\"matchCriteriaId\":\"74DA6820-BE56-4115-A058-45CFF400DAA6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_44:*:*:*:*:*:*\",\"matchCriteriaId\":\"54ECA176-C752-42C6-A9B2-CF408D8C580E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_60:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2E35CA7-FED1-44E9-B144-1B51A2D7FB8B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_73:*:*:*:*:*:*\",\"matchCriteriaId\":\"DBA345D3-0FE7-4BE9-BEBB-96CD4055E546\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_91:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2D4A292-EE3B-4A3A-9B16-E03626F82832\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"9381DBDF-5CE2-454C-BE04-859C9A197C90\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_19:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7442AF7-C511-4A15-AA85-FCB741F6A733\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_24:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9E02250-00AF-4684-A9A0-E9E4032DEA66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_6:*:*:*:*:*:*\",\"matchCriteriaId\":\"27057734-9870-4BA0-9A29-DB03FDFE485F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"r77.30\",\"versionEndExcluding\":\"r81.20\",\"matchCriteriaId\":\"B5E1C45D-3697-4D7D-B9B6-7A0B31D4703B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8F7304B-C04F-4C5B-9E98-D736C55A0AE2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_10:*:*:*:*:*:*\",\"matchCriteriaId\":\"A897D6EA-56D9-4246-9985-9BCE0B5B575E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_101:*:*:*:*:*:*\",\"matchCriteriaId\":\"A93B1873-08AD-45D4-9F27-D76DEBD445E4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_103:*:*:*:*:*:*\",\"matchCriteriaId\":\"C29DD086-7438-45BD-B1DC-B20D2753A7E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_105:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7792771-5225-4B15-8B12-94AC5DB158D8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_111:*:*:*:*:*:*\",\"matchCriteriaId\":\"54CF3193-F101-4BD9-952F-47886308799B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_113:*:*:*:*:*:*\",\"matchCriteriaId\":\"F012878A-86CE-4881-94C1-CA39420E2888\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_115:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8A50B35-2459-43C2-840B-D3BC78837C6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_118:*:*:*:*:*:*\",\"matchCriteriaId\":\"C62D9794-379F-4722-B467-0CFE65A12B80\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_119:*:*:*:*:*:*\",\"matchCriteriaId\":\"D92A32EE-259C-423B-B422-A765EF4426F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_120:*:*:*:*:*:*\",\"matchCriteriaId\":\"668D309B-DA82-4EC4-9F09-A5772BC17447\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_122:*:*:*:*:*:*\",\"matchCriteriaId\":\"1230C289-7789-471F-9EA3-2FE2DCDA6981\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_126:*:*:*:*:*:*\",\"matchCriteriaId\":\"96187221-D11F-4CFA-83AD-0548A528C320\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_127:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF79E967-AEE7-494E-B8E4-94ABFE8BEFB7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_14:*:*:*:*:*:*\",\"matchCriteriaId\":\"E450F71D-626F-4515-91A2-5F4FCD8FE21D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_141:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E73C0C0-227D-42EA-9E5F-BD9120E94213\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_146:*:*:*:*:*:*\",\"matchCriteriaId\":\"926F2DA0-8168-4EED-BB8E-E9A7BC185970\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_24:*:*:*:*:*:*\",\"matchCriteriaId\":\"273F628E-2889-412C-BC02-82FEEF4CE6AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_26:*:*:*:*:*:*\",\"matchCriteriaId\":\"40CC00A2-E57F-49B8-BD9A-A3107258EFF9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_38:*:*:*:*:*:*\",\"matchCriteriaId\":\"38C33CF8-3FA4-4775-91CF-83B9A4B51B5D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_41:*:*:*:*:*:*\",\"matchCriteriaId\":\"186C5B76-630C-483E-9C44-27BA00A1365B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_43:*:*:*:*:*:*\",\"matchCriteriaId\":\"965C32C2-BAD2-415A-B8F3-A5B2A96C077F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_45:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D7B7908-F110-4937-A16F-E942F7EE94E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_53:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7CE4E97-2553-4B54-9B49-2AEFFF1E97DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_54:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3BB26FE-A7A4-4C0C-82E0-3B690C08AF4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_65:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC0BAF78-22E6-4F90-885D-654A317832C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_70:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CEFB387-F28B-4A26-B0BD-A99D88765CF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_76:*:*:*:*:*:*\",\"matchCriteriaId\":\"05C5D50F-DD77-4B91-9B98-EA79206E3AEC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_79:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7A2F23D-A588-4895-91CB-F4726D244E71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_8:*:*:*:*:*:*\",\"matchCriteriaId\":\"496C913F-16A4-4710-80EB-0444ED57F981\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_84:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7B7D466-132A-4584-B6D8-68C05F02E3AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_89:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8DDE050-D1E9-4E42-A511-FE85C5482EAD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_90:*:*:*:*:*:*\",\"matchCriteriaId\":\"2508B0C0-F3F7-4993-A90B-31DBD299C7EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_92:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB51FD59-0119-4335-851F-65F108E34885\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_96:*:*:*:*:*:*\",\"matchCriteriaId\":\"F26A6EE5-5083-42BE-822A-66BB279B68F6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_98:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3BC31FE-EE44-4919-96F1-A3CD9EB2E6F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_99:*:*:*:*:*:*\",\"matchCriteriaId\":\"54AF1EBC-02AE-4303-93E9-ACE2C15831B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A4DD35F-132E-4CB4-846C-8C0A0DAE11A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_10:*:*:*:*:*:*\",\"matchCriteriaId\":\"28B96884-0ED3-4B3F-9FF2-D9826C6A11C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_103:*:*:*:*:*:*\",\"matchCriteriaId\":\"498B5193-9227-408B-BB96-93D47FE6C136\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_107:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F5BF964-A06C-46B4-BBAF-B992F2BFE5BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_12:*:*:*:*:*:*\",\"matchCriteriaId\":\"25CBBD3E-F6BC-44A8-ADF8-A2A683C4FD90\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_14:*:*:*:*:*:*\",\"matchCriteriaId\":\"A593B6C5-F968-4C08-9CEC-0D04CBCFCBAE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_18:*:*:*:*:*:*\",\"matchCriteriaId\":\"B08AEDE4-10E7-49B1-A7E3-343C16651E0C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_19:*:*:*:*:*:*\",\"matchCriteriaId\":\"F52CCFD6-8E42-4704-BCDB-8D4743AD8878\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_25:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1A5BD3C-6C81-4948-BD6E-351AE54E051B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_33:*:*:*:*:*:*\",\"matchCriteriaId\":\"92E9C407-AAF6-4FE8-ABF8-28E78090C2F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_34:*:*:*:*:*:*\",\"matchCriteriaId\":\"17892B1E-CFC8-4A21-A654-0C67AE1CEA02\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_36:*:*:*:*:*:*\",\"matchCriteriaId\":\"782C1482-BF59-4663-A17F-A10247715223\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_39:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECB15DB7-ACF9-4D7E-8BAC-C65634E7C813\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_41:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5E45EF8-9B5E-4AAB-8952-9358AC1625D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_43:*:*:*:*:*:*\",\"matchCriteriaId\":\"BAA7ADEB-B8BF-41C3-B8F9-44B3F617A8B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_44:*:*:*:*:*:*\",\"matchCriteriaId\":\"539F141A-9129-418A-8C86-8DF565A0106B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_60:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F1C55C8-9EFD-4B74-A1B9-83E1B8B4B306\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_73:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC2BB169-1FE9-4DD9-95DD-C2875068B976\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82:take_91:*:*:*:*:*:*\",\"matchCriteriaId\":\"7924252E-97BB-4ADE-81CA-4EB974B6FD51\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82.10:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"4005C231-9EA2-40A5-A2F0-5A94EA498E96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_19:*:*:*:*:*:*\",\"matchCriteriaId\":\"395F93BF-DAC3-4213-AA34-D708570B5B9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_24:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF84D1C9-E656-4CBF-85DB-3AE434DF87F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_6:*:*:*:*:*:*\",\"matchCriteriaId\":\"05B0445D-E33E-4F3F-B21C-B6988C8F0BBB\"}]}]}],\"references\":[{\"url\":\"https://support.checkpoint.com/results/sk/sk185169\",\"source\":\"cve@checkpoint.com\",\"tags\":[\"Mitigation\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"US Government Resource\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.1, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-16232\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-22T20:45:04.891100Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2026-07-22\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232\"}}}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-07-22T00:00:00.000Z\", \"value\": \"CVE-2026-16232 added to CISA KEV\"}], \"references\": [{\"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232\", \"tags\": [\"government-resource\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-22T19:29:35.329Z\"}}], \"cna\": {\"title\": \"Authentication Bypass in the SmartConsole Login Process Using an Application Token\", \"metrics\": [{\"other\": {\"type\": \"CVSSv4.0\", \"content\": {\"version\": \"4.0\", \"baseScore\": 9.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"HIGH\"}}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"checkpoint\", \"product\": \"Quantum Security Management\", \"versions\": [{\"status\": \"affected\", \"version\": \"R82.10 with Jumbo Hotfix Take 36 or below\"}, {\"status\": \"affected\", \"version\": \"R82 with Jumbo Hotfix Take 118 or below\"}, {\"status\": \"affected\", \"version\": \"R81.20 with Jumbo Hotfix Take 158 or below\"}, {\"status\": \"affected\", \"version\": \"R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30\"}]}, {\"vendor\": \"checkpoint\", \"product\": \"Multi-Domain Security Management\", \"versions\": [{\"status\": \"affected\", \"version\": \"R82.10 with Jumbo Hotfix Take 36 or below\"}, {\"status\": \"affected\", \"version\": \"R82 with Jumbo Hotfix Take 118 or below\"}, {\"status\": \"affected\", \"version\": \"R81.20 with Jumbo Hotfix Take 158 or below\"}, {\"status\": \"affected\", \"version\": \"R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30\"}]}], \"references\": [{\"url\": \"https://support.checkpoint.com/results/sk/sk185169\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-287\", \"description\": \"CWE-287: Improper Authentication.\"}]}], \"providerMetadata\": {\"orgId\": \"897c38be-0345-43cd-b6cf-fe179e0c4f45\", \"shortName\": \"checkpoint\", \"dateUpdated\": \"2026-07-22T13:57:15.816Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-16232\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-23T03:55:51.269Z\", \"dateReserved\": \"2026-07-19T12:14:17.233Z\", \"assignerOrgId\": \"897c38be-0345-43cd-b6cf-fe179e0c4f45\", \"datePublished\": \"2026-07-22T13:53:09.830Z\", \"assignerShortName\": \"checkpoint\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0912

Vulnerability from certfr_avis - Published: 2026-07-23 - Updated: 2026-07-23

De multiples vulnérabilités ont été découvertes dans les produits Check Point. Elles permettent à un attaquant de provoquer une élévation de privilèges et un contournement de la politique de sécurité.

Check Point indique que la vulnérabilité CVE-2026-16232 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Check Point	Security Gateways	Security Gateways version R82 sans le dernier correctif de sécurité
Check Point	Security Management	Security Management versions antérieures à R81.20 sans le dernier correctif de sécurité
Check Point	Multi-Domain Security Management	Multi-Domain Security Management version R82 sans le dernier correctif de sécurité
Check Point	Security Management	Security Management version R82.10 sans le dernier correctif de sécurité
Check Point	Multi-Domain Security Management	Multi-Domain Security Management version R82.10 sans le dernier correctif de sécurité
Check Point	Security Management	Security Management version R82 sans le dernier correctif de sécurité
Check Point	Security Gateways	Security Gateways versions antérieures à R81.20 sans le dernier correctif de sécurité
Check Point	Security Gateways	Security Gateways version R82.10 sans le dernier correctif de sécurité
Check Point	Multi-Domain Security Management	Multi-Domain Security Management versions antérieures à R81.20 sans le dernier correctif de sécurité

References

Title

Publication Time

FKIE_CVE-2026-16232

Vulnerability from fkie_nvd - Published: 2026-07-22 14:17 - Updated: 2026-07-23 05:16

CISA CIRCL KEVIntel

Severity

9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Summary

References

	URL	Tags
	cve@checkpoint.com	https://support.checkpoint.com/results/sk/sk185169
	134c704f-9b21-4f2e-91b3-4a467353bcc0	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        },
        {
          "product": "Multi-Domain Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        }
      ],
      "source": "cve@checkpoint.com"
    }
  ],
  "cisaActionDue": "2026-07-25",
  "cisaExploitAdd": "2026-07-22",
  "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "cisaVulnerabilityName": "Check Point SmartConsole Improper Authentication Vulnerability",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers."
    }
  ],
  "id": "CVE-2026-16232",
  "lastModified": "2026-07-23T05:16:30.243",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 9.1,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.2,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-16232",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-07-22T00:00:00+00:00",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-07-22T14:17:15.513",
  "references": [
    {
      "source": "cve@checkpoint.com",
      "url": "https://support.checkpoint.com/results/sk/sk185169"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
    }
  ],
  "sourceIdentifier": "cve@checkpoint.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ],
      "source": "cve@checkpoint.com",
      "type": "Secondary"
    }
  ]
}

GHSA-M2XX-23GX-734V

Vulnerability from github – Published: 2026-07-22 15:31 – Updated: 2026-07-22 21:32

Details

Severity

9.1 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-16232"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-287"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-22T14:17:15Z",
    "severity": "CRITICAL"
  },
  "details": "An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.",
  "id": "GHSA-m2xx-23gx-734v",
  "modified": "2026-07-22T21:32:02Z",
  "published": "2026-07-22T15:31:23Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16232"
    },
    {
      "type": "WEB",
      "url": "https://support.checkpoint.com/results/sk/sk185169"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2026-0264

Vulnerability from csaf_ncscnl - Published: 2026-07-24 11:50 - Updated: 2026-07-24 11:50

Summary

Kwetsbaarheden verholpen in Check Point Security Management producten

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Check Point heeft kwetsbaarheden verholpen in SmartConsole, Gaia Portal, Security Management en Multi-Domain Security Management.

Interpretaties: De kwetsbaarheden betreffen authenticatiebypasses en privilege-escalaties binnen verschillende Check Point managementcomponenten. - In SmartConsole kunnen niet-geauthenticeerde externe aanvallers administratieve login tokens verkrijgen, waardoor zij volledige administratieve toegang krijgen en beveiligingsbeleid kunnen aanpassen. Deze kwetsbaarheid vereist internettoegang tot de Management Server en een permissieve Trusted Clients configuratie. - In Gaia Portal kan een geauthenticeerde gebruiker met alleen leesrechten commando's uitvoeren met root privileges, wat toegangsbescherming omzeilt. - In Security Management en Multi-Domain Security Management kunnen niet-geauthenticeerde externe aanvallers met netwerktoegang tot de Management Server administratieve commando's uitvoeren, wat kan leiden tot controle over beheerde Security Gateways, afhankelijk van firewall- en Trusted Client-instellingen. Checkpoint meldt dat van de kwetsbaarheid met kenmerk CVE-2026-16232 actief misbruik is waargenomen bij een beperkt aantal gebruikers die de kwetsbare tooling incorrect geconfigureerd hadden en publiek beschikbaar hadden op internet. Deze gebruikers zijn reeds geïnformeerd. Er is op dit moment nog geen verder misbruik waargenomen. De genoemde applicaties zijn niet bedoeld om zonder additionele maatregelen publiek toegankelijk te hebben, maar af te steunen in een separate omgeving. Met name publiek toegankelijke systemen lopen een hoog risico op actief misbruik.

Oplossingen: Check Point heeft updates uitgebracht om deze kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-269: Improper Privilege Management

CWE-287: Improper Authentication

CVE-2026-16232

An authentication bypass vulnerability in Check Point SmartConsole allows unauthenticated remote attackers to obtain administrative login tokens and gain full control over security policies, requiring internet access to the Management Server and permissive Trusted Clients configuration.

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Known affected 5 products

Product	Identifier	Version	Remediation
vers:unknown/* Check Point / Multi-Domain Security Management Server		vers:unknown/*
vers:unknown/* Check Point / Quantum Security Gateway, Quantum Security Management		vers:unknown/*
vers:unknown/* Check Point / Quantum Security Management, Multi-Domain Security Management		vers:unknown/*
vers:unknown/* Check Point / Security Management Server		vers:unknown/*
vers:unknown/* Check Point / SmartConsole		vers:unknown/*

CVE-2026-62145

A vulnerability in Check Point Gaia Portal allows an authenticated user with read-only access to execute commands with root privileges, posing a significant security risk.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Known affected 5 products

Product	Identifier	Version	Remediation
vers:unknown/* Check Point / Multi-Domain Security Management Server		vers:unknown/*
vers:unknown/* Check Point / Quantum Security Gateway, Quantum Security Management		vers:unknown/*
vers:unknown/* Check Point / Quantum Security Management, Multi-Domain Security Management		vers:unknown/*
vers:unknown/* Check Point / Security Management Server		vers:unknown/*
vers:unknown/* Check Point / SmartConsole		vers:unknown/*

CVE-2026-62144

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management enables unauthenticated remote attackers with network access to execute administrative commands and potentially control managed Security Gateways.

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Known affected 5 products

Product	Identifier	Version	Remediation
vers:unknown/* Check Point / Multi-Domain Security Management Server		vers:unknown/*
vers:unknown/* Check Point / Quantum Security Gateway, Quantum Security Management		vers:unknown/*
vers:unknown/* Check Point / Quantum Security Management, Multi-Domain Security Management		vers:unknown/*
vers:unknown/* Check Point / Security Management Server		vers:unknown/*
vers:unknown/* Check Point / SmartConsole		vers:unknown/*

References

6 references

URL	Category
https://support.checkpoint.com/results/sk/sk185152	external
https://support.checkpoint.com/results/sk/sk185153	external
https://support.checkpoint.com/results/sk/sk185169	external
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Check Point heeft kwetsbaarheden verholpen in SmartConsole, Gaia Portal, Security Management en Multi-Domain Security Management.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden betreffen authenticatiebypasses en privilege-escalaties binnen verschillende Check Point managementcomponenten.\n\n- In SmartConsole kunnen niet-geauthenticeerde externe aanvallers administratieve login tokens verkrijgen, waardoor zij volledige administratieve toegang krijgen en beveiligingsbeleid kunnen aanpassen. Deze kwetsbaarheid vereist internettoegang tot de Management Server en een permissieve Trusted Clients configuratie.\n- In Gaia Portal kan een geauthenticeerde gebruiker met alleen leesrechten commando\u0027s uitvoeren met root privileges, wat toegangsbescherming omzeilt.\n- In Security Management en Multi-Domain Security Management kunnen niet-geauthenticeerde externe aanvallers met netwerktoegang tot de Management Server administratieve commando\u0027s uitvoeren, wat kan leiden tot controle over beheerde Security Gateways, afhankelijk van firewall- en Trusted Client-instellingen.\n\nCheckpoint meldt dat van de kwetsbaarheid met kenmerk CVE-2026-16232 actief misbruik is waargenomen bij een beperkt aantal gebruikers die de kwetsbare tooling incorrect geconfigureerd hadden en publiek beschikbaar hadden op internet. Deze gebruikers zijn reeds ge\u00efnformeerd. Er is op dit moment nog geen verder misbruik waargenomen.\n\nDe genoemde applicaties zijn niet bedoeld om zonder additionele maatregelen publiek toegankelijk te hebben, maar af te steunen in een separate omgeving. Met name publiek toegankelijke systemen lopen een hoog risico op actief misbruik.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Check Point heeft updates uitgebracht om deze kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Privilege Management",
        "title": "CWE-269"
      },
      {
        "category": "general",
        "text": "Improper Authentication",
        "title": "CWE-287"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.checkpoint.com/results/sk/sk185152"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.checkpoint.com/results/sk/sk185153"
      },
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.checkpoint.com/results/sk/sk185169"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Check Point Security Management producten",
    "tracking": {
      "current_release_date": "2026-07-24T11:50:43.630584Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0264",
      "initial_release_date": "2026-07-24T11:50:43.630584Z",
      "revision_history": [
        {
          "date": "2026-07-24T11:50:43.630584Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Multi-Domain Security Management Server"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "Quantum Security Gateway, Quantum Security Management"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-3"
                }
              }
            ],
            "category": "product_name",
            "name": "Quantum Security Management, Multi-Domain Security Management"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-4"
                }
              }
            ],
            "category": "product_name",
            "name": "Security Management Server"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-5"
                }
              }
            ],
            "category": "product_name",
            "name": "SmartConsole"
          }
        ],
        "category": "vendor",
        "name": "Check Point"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-16232",
      "notes": [
        {
          "category": "description",
          "text": "An authentication bypass vulnerability in Check Point SmartConsole allows unauthenticated remote attackers to obtain administrative login tokens and gain full control over security policies, requiring internet access to the Management Server and permissive Trusted Clients configuration.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-16232 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16232.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5"
          ]
        }
      ],
      "title": "CVE-2026-16232"
    },
    {
      "cve": "CVE-2026-62145",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in Check Point Gaia Portal allows an authenticated user with read-only access to execute commands with root privileges, posing a significant security risk.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62145 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62145.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5"
          ]
        }
      ],
      "title": "CVE-2026-62145"
    },
    {
      "cve": "CVE-2026-62144",
      "notes": [
        {
          "category": "description",
          "text": "An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management enables unauthenticated remote attackers with network access to execute administrative commands and potentially control managed Security Gateways.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3",
          "CSAFPID-4",
          "CSAFPID-5"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-62144 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62144.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3",
            "CSAFPID-4",
            "CSAFPID-5"
          ]
        }
      ],
      "title": "CVE-2026-62144"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2026-16232 (GCVE-0-2026-16232)

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Vendor Report Successful Exploitation Confidence: 80% Source: cisa-kev

Details

References

CIRCL

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Characteristics

Timestamps

KEVIntel

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Public Report Successful Exploitation Confidence: 70% Source: kevintel

Details

References

CERTFR-2026-AVI-0912

Solutions

FKIE_CVE-2026-16232

GHSA-M2XX-23GX-734V

NCSC-2026-0264

Tags

Sightings

Nomenclature