قاعدة الثغرات (CVE)

CVE-2026-16232

مصادقة غير سليمة تمنح رمز دخول إداري في Check Point SmartConsole

مهاجم عن بُعد غير مصادَق يستطيع الحصول على رمز تسجيل دخول للتطبيق واستخدامه للمصادقة بصلاحيات إدارية كاملة على وحدة إدارة Check Point.

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.