Warning: Three privilege escalation vulnerabilities in Check Point products, including 1 actively exploited vulnerability which allows threat actors to authenticate with full admin privileges, Patch Immediately!

**Check Point emergency hotfix (22 Jul 2026) addressing three high-severity vulnerabilities affecting Check Point SmartConsole, Management and Gaia Portal, including an actively exploited zero-day (CVE-2026-16232, CVSS 9.3) that allows unauthenticated attackers to obtain admin privileges and modify security policy; exploitation is limited to specific configurations where Management is exposed without IP restrictions. The advisory urges immediate patching, enhanced monitoring/detection, access restrictions (trusted clients/IPs, firewall protection, 2FA) and review for historical compromise using vendor-provided IoCs and queries.**