Checkpoint News Articles

New Check Point flaw lets hackers execute code with root privileges

Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code with root privileges on management systems.

3 days ago

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root - SwapUpdate

A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to run code as root on those

3 days ago

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

Check Point patched CVE-2026-91843, a critical login stack overflow that can let unauthenticated attackers run code as root on management servers.

4 days ago

Check Point Vulnerability Lets Remote Hackers Gain Root Access Without Authentication

Check Point has released an urgent security fix for CVE-2026-91843, a critical stack-based buffer overflow that could let an unauthenticated remote attacker execute arbitrary code with root privileges on vulnerable security management and logging systems.

5 days ago

Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

Check Point fixes two VPN certificate flaws that can enable unauthenticated remote code execution under unspecified conditions.

2 weeks ago

Check Point SmartConsole Authentication Bypass Is Under Active Attack, and a PoC Is Now Public - Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

CVE-2026-16232 lets an unauthenticated attacker seize full admin control of Check Point's management console. Check Point confirms in-the-wild attacks, and a Rapid7 PoC is now public.

Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass

Ravie LakshmananJul 29, 2026Vulnerability / Enterprise Security

Check Point SmartConsole 0-Day Exploited to Gain Full Administrator Access - PoC Released

A critical authentication bypass in SmartConsole that was actively exploited as a zero-day before patches were available.

Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass

CVE-2026-16232 bypasses SmartConsole authentication, letting remote attackers gain full administrator access; Check Point patched it July 22.

New Check Point Zero-Day Vulnerability Exploited in the Wild

Check Point has notified customers that a critical zero-day vulnerability discovered recently in its products has been exploited in the wild.

Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232) - IT Security News

Attackers are exploiting a critical authentication bypass vulnerability (CVE-2026-16232) that affects Check Point Security Management and Multi-Domain Security Management, the management servers that push policy to Check Point security gateways (i.e., firewalls). “An unauthenticated attacker can obt...

Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232) - Help Net Security

Attackers are exploiting an auth bypass flaw (CVE-2026-16232) that affects the management servers that push policy to Check Point gateways.

Critical Check Point SmartConsole Flaw Exploited in the Wild to Bypass Authentication - IT Security News

A critical authentication bypass vulnerability affecting Check Point SmartConsole has been actively exploited in the wild, allowing attackers to gain unauthorized access to security management systems under specific configurations. The flaw, tracked as CVE-2026-16232, carries a CVSS score of 9.3…Rea...

CISA Warns of Check Point Authentication Vulnerability Actively Exploited in the Wild - IT Security News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about a critical authentication vulnerability in Check Point SmartConsole that is actively being exploited in the wild, prompting organizations to take immediate defensive action. Tracked as CVE-2026-16232,...

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Ravie LakshmananJul 23, 2026Vulnerability / Network Security

Check Point warns of SmartConsole zero-day exploited in attacks

Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company's SmartConsole graphical user interface (GUI) admin panel.

CISA Warns of Check Point Authentication Vulnerability Actively Exploited in the Wild

CISA added the Check Point SmartConsole flaw to its KEV catalog after it was found to allow unauthenticated remote attackers to gain full administrative access.

CISA Warns of Check Point Authentication Vulnerability Exploited in Attacks - IT Security News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about a critical authentication vulnerability in Check Point SmartConsole that is actively being exploited in the wild, prompting organizations to take immediate defensive action. Tracked as CVE-2026-16232,...

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point patches actively exploited CVE-2026-16232, a SmartConsole auth bypass that grants full admin access on exposed management servers.

IT Security News Weekly Summary 24 - IT Security News

210 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-06-14 19:5 : IT Security News Hourly Summary 2026-06-14 21h : 2 posts 18:10 : Hackers Hide New Argamal Malware Inside Working Hentai Games 18:10…Read more →

Researchers release details, PoC for exploited Check Point VPN flaw (CVE-2026-50751) - IT Security News

WatchTowr researchers have disclosed a technical analysis and a “Detection Artefact Generator” for CVE-2026-50751, an authentication bypass flaw in Check Point’s Remote Access VPN and Mobile Access, which the vendor confirmed to be actively exploited. The attacks were limited, but…Read more →

Researchers release details, PoC for exploited Check Point VPN flaw (CVE-2026-50751) - Help Net Security

WatchTowr researchers have disclosed a technical analysis and PoC exploit for an actively exploited Check Point VPN flaw (CVE-2026-50751).

Check Point VPN Authentication Bypass (CVE-2026-50751): Client-Controlled IKEv1 Auth Flipped by Ransomware Affiliate - Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

A CVSS 9.3 flaw in Check Point Remote Access VPN let unauthenticated attackers bypass certificate validation by supplying a crafted IKEv1 VendorID payload — exploited for 32 days before a patch, with one confirmed Qilin ransomware post-compromise chain.

CISA Warns of Check Point Security Gateway Vulnerability Actively Exploited in Ransomware Attacks - IT Security News

CISA has added a critical vulnerability in Check Point Security Gateway to its Known Exploited Vulnerabilities (KEV) catalog, warning that threat actors are actively exploiting the flaw in ransomware campaigns. The vulnerability, tracked as CVE-2026-50751, allows unauthenticated remote attackers to…...

CISA Warns of Check Point Security Gateway Vulnerability Actively Exploited in Ransomware Attacks

CISA has added a critical vulnerability in Check Point Security Gateway to its Known Exploited Vulnerabilities (KEV) catalog, warning that threat actors are actively exploiting the flaw in ransomware campaigns.