Checkpoint News Articles

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances - Help Net Security

Check Point Management Servers and Spark firewalls and F5 BIG-IP APM instances targeted via zero-days, patches and IoCs released.

3 weeks ago

Check Point warns of hackers exploiting Security Gateway VPN RCE flaw

Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE) vulnerability in the VPN certificate-handling functionality of its Security Gateway product.

3 weeks ago

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks - SwapUpdate

Swati KhandelwalSep 22, 2026Network Security / Vulnerability

3 weeks ago

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Check Point fixed a Security Management Server flaw exploited in targeted July attacks that can run scripts without login.

3 weeks ago

Check Point warns of Management Server zero-day exploited in attacks

Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that could let attackers run arbitrary scripts.

3 weeks ago

New Check Point flaw lets hackers execute code with root privileges

Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code with root privileges on management systems.

1 month ago

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root - SwapUpdate

A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to run code as root on those

1 month ago

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

Check Point patched CVE-2026-91843, a critical login stack overflow that can let unauthenticated attackers run code as root on management servers.

1 month ago

Check Point Vulnerability Lets Remote Hackers Gain Root Access Without Authentication

Check Point has released an urgent security fix for CVE-2026-91843, a critical stack-based buffer overflow that could let an unauthenticated remote attacker execute arbitrary code with root privileges on vulnerable security management and logging systems.

1 month ago

Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

Check Point fixes two VPN certificate flaws that can enable unauthenticated remote code execution under unspecified conditions.

Check Point SmartConsole Authentication Bypass Is Under Active Attack, and a PoC Is Now Public - Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

CVE-2026-16232 lets an unauthenticated attacker seize full admin control of Check Point's management console. Check Point confirms in-the-wild attacks, and a Rapid7 PoC is now public.

Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass

Ravie LakshmananJul 29, 2026Vulnerability / Enterprise Security

Check Point SmartConsole 0-Day Exploited to Gain Full Administrator Access - PoC Released

A critical authentication bypass in SmartConsole that was actively exploited as a zero-day before patches were available.

Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass

CVE-2026-16232 bypasses SmartConsole authentication, letting remote attackers gain full administrator access; Check Point patched it July 22.

New Check Point Zero-Day Vulnerability Exploited in the Wild

Check Point has notified customers that a critical zero-day vulnerability discovered recently in its products has been exploited in the wild.

Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232) - IT Security News

Attackers are exploiting a critical authentication bypass vulnerability (CVE-2026-16232) that affects Check Point Security Management and Multi-Domain Security Management, the management servers that push policy to Check Point security gateways (i.e., firewalls). “An unauthenticated attacker can obt...

Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232) - Help Net Security

Attackers are exploiting an auth bypass flaw (CVE-2026-16232) that affects the management servers that push policy to Check Point gateways.

Critical Check Point SmartConsole Flaw Exploited in the Wild to Bypass Authentication - IT Security News

A critical authentication bypass vulnerability affecting Check Point SmartConsole has been actively exploited in the wild, allowing attackers to gain unauthorized access to security management systems under specific configurations. The flaw, tracked as CVE-2026-16232, carries a CVSS score of 9.3…Rea...

CISA Warns of Check Point Authentication Vulnerability Actively Exploited in the Wild - IT Security News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about a critical authentication vulnerability in Check Point SmartConsole that is actively being exploited in the wild, prompting organizations to take immediate defensive action. Tracked as CVE-2026-16232,...

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Ravie LakshmananJul 23, 2026Vulnerability / Network Security

Check Point warns of SmartConsole zero-day exploited in attacks

Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company's SmartConsole graphical user interface (GUI) admin panel.

CISA Warns of Check Point Authentication Vulnerability Actively Exploited in the Wild

CISA added the Check Point SmartConsole flaw to its KEV catalog after it was found to allow unauthenticated remote attackers to gain full administrative access.

CISA Warns of Check Point Authentication Vulnerability Exploited in Attacks - IT Security News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about a critical authentication vulnerability in Check Point SmartConsole that is actively being exploited in the wild, prompting organizations to take immediate defensive action. Tracked as CVE-2026-16232,...

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point patches actively exploited CVE-2026-16232, a SmartConsole auth bypass that grants full admin access on exposed management servers.

IT Security News Weekly Summary 24 - IT Security News

210 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-06-14 19:5 : IT Security News Hourly Summary 2026-06-14 21h : 2 posts 18:10 : Hackers Hide New Argamal Malware Inside Working Hentai Games 18:10…Read more →