Critical Check Point Flaw Lets Attackers Bypass SmartConsole Authentication

Check Point disclosed three vulnerabilities in its Security Management and Multi‑Domain Management products—most critically CVE‑2026‑16232 (CVSS 9.3), an authentication bypass already observed in the wild against internet‑exposed management servers—alongside two other high‑severity flaws; the advisory lists affected versions, six IP addresses tied to exploitation attempts, and urgent mitigation steps including immediate jumbo hotfix installation and restricting management access.