Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for multi-domain_security_management by checkpoint

    CVE-2026-16232 (GCVE-0-2026-16232)

    Vulnerability from nvd – Published: 2026-07-22 13:53 – Updated: 2026-07-23 03:55
    VLAI CISA KEVIntel
    Title
    Authentication Bypass in the SmartConsole Login Process Using an Application Token
    Summary
    An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.
    Severity
    9.1 (Critical)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
    SSVC
    Exploitation: active Automatable: yes Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-287 - Improper Authentication.
    Assigner
    References
    Impacted products
    Vendor Product Version
    checkpoint Quantum Security Management Affected: R82.10 with Jumbo Hotfix Take 36 or below
    Affected: R82 with Jumbo Hotfix Take 118 or below
    Affected: R81.20 with Jumbo Hotfix Take 158 or below
    Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
    		Create a notification for this product.
    checkpoint Multi-Domain Security Management Affected: R82.10 with Jumbo Hotfix Take 36 or below
    Affected: R82 with Jumbo Hotfix Take 118 or below
    Affected: R81.20 with Jumbo Hotfix Take 158 or below
    Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-16232",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-07-22",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T03:55:51.269Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-07-22T00:00:00.000Z",
            "value": "CVE-2026-16232 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        },
        {
          "product": "Multi-Domain Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers."
        }
      ],
      "metrics": [
        {
          "format": "CVSS",
          "other": {
            "content": {
              "attackComplexity": "LOW",
              "attackRequirements": "NONE",
              "attackVector": "NETWORK",
              "baseScore": 9.3,
              "baseSeverity": "CRITICAL",
              "privilegesRequired": "NONE",
              "subAvailabilityImpact": "NONE",
              "subConfidentialityImpact": "NONE",
              "subIntegrityImpact": "NONE",
              "userInteraction": "NONE",
              "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "version": "4.0",
              "vulnAvailabilityImpact": "HIGH",
              "vulnConfidentialityImpact": "HIGH",
              "vulnIntegrityImpact": "HIGH"
            },
            "type": "CVSSv4.0"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication.",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-22T13:57:15.816Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk185169"
        }
      ],
      "title": "Authentication Bypass in the SmartConsole Login Process Using an Application Token"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2026-16232",
    "datePublished": "2026-07-22T13:53:09.830Z",
    "dateReserved": "2026-07-19T12:14:17.233Z",
    "dateUpdated": "2026-07-23T03:55:51.269Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-16232 (GCVE-0-2026-16232)

    Vulnerability from cvelistv5 – Published: 2026-07-22 13:53 – Updated: 2026-07-23 03:55
    VLAI CISA KEVIntel
    Title
    Authentication Bypass in the SmartConsole Login Process Using an Application Token
    Summary
    An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.
    Severity
    9.1 (Critical)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
    SSVC
    Exploitation: active Automatable: yes Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-287 - Improper Authentication.
    Assigner
    References
    Impacted products
    Vendor Product Version
    checkpoint Quantum Security Management Affected: R82.10 with Jumbo Hotfix Take 36 or below
    Affected: R82 with Jumbo Hotfix Take 118 or below
    Affected: R81.20 with Jumbo Hotfix Take 158 or below
    Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
    		Create a notification for this product.
    checkpoint Multi-Domain Security Management Affected: R82.10 with Jumbo Hotfix Take 36 or below
    Affected: R82 with Jumbo Hotfix Take 118 or below
    Affected: R81.20 with Jumbo Hotfix Take 158 or below
    Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-16232",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-07-22",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T03:55:51.269Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-07-22T00:00:00.000Z",
            "value": "CVE-2026-16232 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        },
        {
          "product": "Multi-Domain Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers."
        }
      ],
      "metrics": [
        {
          "format": "CVSS",
          "other": {
            "content": {
              "attackComplexity": "LOW",
              "attackRequirements": "NONE",
              "attackVector": "NETWORK",
              "baseScore": 9.3,
              "baseSeverity": "CRITICAL",
              "privilegesRequired": "NONE",
              "subAvailabilityImpact": "NONE",
              "subConfidentialityImpact": "NONE",
              "subIntegrityImpact": "NONE",
              "userInteraction": "NONE",
              "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "version": "4.0",
              "vulnAvailabilityImpact": "HIGH",
              "vulnConfidentialityImpact": "HIGH",
              "vulnIntegrityImpact": "HIGH"
            },
            "type": "CVSSv4.0"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication.",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-22T13:57:15.816Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk185169"
        }
      ],
      "title": "Authentication Bypass in the SmartConsole Login Process Using an Application Token"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2026-16232",
    "datePublished": "2026-07-22T13:53:09.830Z",
    "dateReserved": "2026-07-19T12:14:17.233Z",
    "dateUpdated": "2026-07-23T03:55:51.269Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}