# Check Point Patches Critical SmartConsole Flaw Granting Full Admin Access Authentication bypass vulnerability allowed remote attackers to gain complete control. - **Source:** [The Hacker News](https://brifing.si/source/f944ec2b-8180-47bc-94de-57085b5a6563) - **Published:** 2026-07-23 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/511a333a-fe8d-4e35-b9f2-7684d11ff405 ## Critical Security Flaw Check Point has addressed a critical vulnerability in SmartConsole, tracked as CVE-2026-16232. This flaw bypasses authentication, granting attackers full administrative privileges. Exploitation only required internet access to the management server, making exposed systems particularly vulnerable. ## Affected Systems The security gap impacts Check Point's Security Management and Multi-Domain Management (MDSM) products across versions R77.30 through R82.10. The company confirmed it has notified affected customers about the active exploitation of this vulnerability in specific configurations. ## Attack Scenario Successful exploitation enables modification of security policies and configurations. Attackers can execute administrative commands and gain root privileges. Check Point clarified that only management servers directly exposed to the internet without IP restrictions were being targeted in these attacks. ## Patch and Mitigations Check Point released a Jumbo hotfix on July 22 to resolve the issue. Recommendations include applying the patch immediately, restricting trusted clients to specific IP ranges, protecting management access with firewalls, and limiting access to trusted IP addresses only to prevent potential breaches. ## CISA Intervention The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added this vulnerability to its Known Exploited Vulnerabilities catalog. Federal agencies must implement fixes by July 25, 2026, highlighting the flaw's severity and potential impact on critical infrastructure systems nationwide. ## Broad Implications This vulnerability extends beyond Check Point customers to potentially affect critical infrastructure. Full admin access flaws can lead to data breaches and system manipulation. Rapid patch deployment remains crucial for organizations to maintain their cybersecurity posture against evolving threats. ## Sources covering this story - https://thehackernews.com/2026/07/check-point-patches-exploited.html — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._