Check Point patches actively exploited SmartConsole authentication bypass flaw

Check Point released security updates to remediate a critical authentication bypass (CVE-2026-16232, CVSS 9.3) in SmartConsole that is under active exploitation and can allow unauthenticated attackers to obtain a login token and gain full administrative access to Security Management and MDSM servers; the advisory includes identified attacker IPs, affected product versions, recommended mitigations (restrict Trusted Clients, firewall-management access, apply July 22 jumbo hotfix), and notes two additional high-severity CVEs impacting management functionality and Gaia Portal privilege escalation.