CISA Warns of Check Point Authentication Vulnerability Actively Exploited in the Wild

CISA and Check Point warn of CVE-2026-16232, a critical (CVSS 9.3) authentication bypass in Check Point SmartConsole/Management that is actively exploited to obtain admin tokens and potentially enable full infrastructure compromise; affected versions include R81.10, R81.20, R82, and R82.10. Observed attacker IPs are listed, the flaw is included in CISA's KEV catalog, and organizations are urged to apply the July 22, 2026 Jumbo Hotfix and restrict management interfaces to trusted IPs immediately.