Checkpoint News Articles

Check Point SmartConsole Authentication Bypass Is Under Active Attack, and a PoC Is Now Public - Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

CVE-2026-16232 lets an unauthenticated attacker seize full admin control of Check Point's management console. Check Point confirms in-the-wild attacks, and a Rapid7 PoC is now public.

1 week ago

Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass

Ravie LakshmananJul 29, 2026Vulnerability / Enterprise Security

2 weeks ago

Check Point SmartConsole 0-Day Exploited to Gain Full Administrator Access - PoC Released

A critical authentication bypass in SmartConsole that was actively exploited as a zero-day before patches were available.

2 weeks ago

Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass

CVE-2026-16232 bypasses SmartConsole authentication, letting remote attackers gain full administrator access; Check Point patched it July 22.

2 weeks ago

New Check Point Zero-Day Vulnerability Exploited in the Wild

Check Point has notified customers that a critical zero-day vulnerability discovered recently in its products has been exploited in the wild.

3 weeks ago

Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232) - IT Security News

Attackers are exploiting a critical authentication bypass vulnerability (CVE-2026-16232) that affects Check Point Security Management and Multi-Domain Security Management, the management servers that push policy to Check Point security gateways (i.e., firewalls). “An unauthenticated attacker can obt...

3 weeks ago

Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232) - Help Net Security

Attackers are exploiting an auth bypass flaw (CVE-2026-16232) that affects the management servers that push policy to Check Point gateways.

3 weeks ago

Critical Check Point SmartConsole Flaw Exploited in the Wild to Bypass Authentication - IT Security News

A critical authentication bypass vulnerability affecting Check Point SmartConsole has been actively exploited in the wild, allowing attackers to gain unauthorized access to security management systems under specific configurations. The flaw, tracked as CVE-2026-16232, carries a CVSS score of 9.3…Rea...

3 weeks ago

CISA Warns of Check Point Authentication Vulnerability Actively Exploited in the Wild - IT Security News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about a critical authentication vulnerability in Check Point SmartConsole that is actively being exploited in the wild, prompting organizations to take immediate defensive action. Tracked as CVE-2026-16232,...

3 weeks ago

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Ravie LakshmananJul 23, 2026Vulnerability / Network Security

3 weeks ago

Check Point warns of SmartConsole zero-day exploited in attacks

Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company's SmartConsole graphical user interface (GUI) admin panel.

3 weeks ago

CISA Warns of Check Point Authentication Vulnerability Actively Exploited in the Wild

CISA added the Check Point SmartConsole flaw to its KEV catalog after it was found to allow unauthenticated remote attackers to gain full administrative access.

3 weeks ago

CISA Warns of Check Point Authentication Vulnerability Exploited in Attacks - IT Security News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about a critical authentication vulnerability in Check Point SmartConsole that is actively being exploited in the wild, prompting organizations to take immediate defensive action. Tracked as CVE-2026-16232,...

3 weeks ago

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point patches actively exploited CVE-2026-16232, a SmartConsole auth bypass that grants full admin access on exposed management servers.

3 weeks ago

IT Security News Weekly Summary 24 - IT Security News

210 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-06-14 19:5 : IT Security News Hourly Summary 2026-06-14 21h : 2 posts 18:10 : Hackers Hide New Argamal Malware Inside Working Hentai Games 18:10…Read more →

Researchers release details, PoC for exploited Check Point VPN flaw (CVE-2026-50751) - IT Security News

WatchTowr researchers have disclosed a technical analysis and a “Detection Artefact Generator” for CVE-2026-50751, an authentication bypass flaw in Check Point’s Remote Access VPN and Mobile Access, which the vendor confirmed to be actively exploited. The attacks were limited, but…Read more →

Researchers release details, PoC for exploited Check Point VPN flaw (CVE-2026-50751) - Help Net Security

WatchTowr researchers have disclosed a technical analysis and PoC exploit for an actively exploited Check Point VPN flaw (CVE-2026-50751).

Check Point VPN Authentication Bypass (CVE-2026-50751): Client-Controlled IKEv1 Auth Flipped by Ransomware Affiliate - Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

A CVSS 9.3 flaw in Check Point Remote Access VPN let unauthenticated attackers bypass certificate validation by supplying a crafted IKEv1 VendorID payload — exploited for 32 days before a patch, with one confirmed Qilin ransomware post-compromise chain.

CISA Warns of Check Point Security Gateway Vulnerability Actively Exploited in Ransomware Attacks - IT Security News

CISA has added a critical vulnerability in Check Point Security Gateway to its Known Exploited Vulnerabilities (KEV) catalog, warning that threat actors are actively exploiting the flaw in ransomware campaigns. The vulnerability, tracked as CVE-2026-50751, allows unauthenticated remote attackers to…...

CISA Warns of Check Point Security Gateway Vulnerability Actively Exploited in Ransomware Attacks

CISA has added a critical vulnerability in Check Point Security Gateway to its Known Exploited Vulnerabilities (KEV) catalog, warning that threat actors are actively exploiting the flaw in ransomware campaigns.

Check Point Warning: Actively Exploited VPN Zero-Day Linked to Qilin Ransomware

Check Point says VPN zero-day CVE-2026-50751 was exploited by a Qilin-linked actor, prompting emergency hotfixes and a CISA patch deadline.

Check Point Warns Critical Auth Bypass Bug Exploited in the Wild

Check Point says a critical vulnerability in its Remote Access VPN and Mobile Access solutions has been exploited by Qilin

Check Point warns of critical VPN authentication vulnerability

Check Point discovered CVE-2026-50751, an actively exploited authentication flaw in VPNs using IKEv1. Qilin ransomware has already been linked to an incident.

CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day

CISA has ordered U.S. government agencies to secure their Check Point Remote Access VPN and Mobile Access deployments against a critical vulnerability exploited in zero-day attacks by Qilin ransomware affiliates.

Check Point VPN Zero-Day Under Active Exploitation by Ransomware Operators - IT Security News

Check Point has disclosed active in-the-wild exploitation of a critical authentication bypass vulnerability, tracked as CVE-2026-50751, impacting Remote Access VPN and Mobile Access deployments configured with the deprecated IKEv1 key exchange protocol. The flaw, assigned a CVSS score of 9.3,…Read m...