Check Point Product Security Update Advisory (CVE-2026-16232)
Jul 24 2026
A security update has been released to address a vulnerability in Check Point products.
The affected products are the Security Management Server and the Multi-Domain Security Management Server (MDS).
The identified vulnerability is CVE-2026-16232, an authentication bypass vulnerability.
This vulnerability is related to the SmartConsole login process using an application token.
Affected Versions include R77.30, R80, R80.10, R80.20, R80.30, R81, R81.10, R81.20, R82, R82.10, And the corresponding versions of the Multi-Domain Security Management Server (MDS).
A patch to resolve this issue has been provided via the latest update.
Specifically, the Security Management Server and Multi-Domain Security Management Server (MDS) must be updated to R81.20 Jumbo Hotfix Accumulator Take 158 or later, R82 Jumbo Hotfix Accumulator Take 118 or higher, or R82.10 Jumbo Hotfix Accumulator Take 36 or higher.
Users of these products should update to the latest version of the Vulnerability Patch following the instructions on the reference site.
