CISA Adds SharePoint and Check Point Vulnerabilities to Its Catalog
Critical flaws in Microsoft SharePoint and Check Point SmartConsole are actively exploited.
1CISA's Catalog Update
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added critical vulnerabilities in Microsoft SharePoint and Check Point SmartConsole to its Known Exploited Vulnerabilities (KEV) catalog. These flaws are actively exploited, allowing unauthorized access to systems.
2Check Point SmartConsole Flaw
Tracked as CVE-2026-16232, this flaw allows authentication bypass in Check Point SmartConsole. Attackers can gain full administrative access and alter security policies. The vulnerability targets management servers with internet access.
3Microsoft SharePoint Flaw
Tracked as CVE-2026-50522, this flaw enables remote code execution on SharePoint servers. Attackers with Site Owner privileges can infiltrate systems. The vulnerability was actively exploited shortly after public exploit code was released.
4Attackers' Targets
The Check Point flaw impacted a limited number of customers, and the company has notified affected organizations. The SharePoint flaw targets on-premises servers, with attackers stealing machine keys to maintain persistent access.
5Security Measures
CISA has ordered federal agencies to fix these vulnerabilities by July 25, 2026. Experts recommend applying updates and rotating machine keys and credentials to prevent long-term compromise.
6Importance and Implications
These vulnerabilities pose significant risks by granting unauthorized access to critical systems. Rapid application of updates and additional security measures are crucial to preventing cyberattacks.