Back to the CVE list
CVE-2026-16232 CISA KEV · Actively exploitedSuited to automated attack · CISA

Authentication Bypass in the SmartConsole Login Process Using an Application Token

CVSS score

9.3

EPSS probability

%78.0

Risk score

14.5

Published

2 mo ago

OverviewPublic Exploits (3)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

N
projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-16232.yaml
Nuclei

Nuclei: Check Point Security Management Server - SmartConsole Authentication Bypass

Exploit reference
G
HackSpeak/CVE-2026-16232
GitHub

CVE-2026-16232 (Check Point SmartConsole authentication bypass) PoC - unauth to admin; for authorized security testing

Public PoC
G
sfewer-r7/CVE-2026-16232
GitHub

A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login process using an application token.

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-16232"