Vulnerability

CERT-In Vulnerability Note CIVN-2026-0379
Authentication Bypass Vulnerability in Check Point Products

Original Issue Date:July 27, 2026

Severity Rating: CRITICAL

Software Affected

Check Point Quantum Security Management R82.10 with Jumbo Hotfix Take 36 or below
Check Point Quantum Security Management R82 with Jumbo Hotfix Take 118 or below
Check Point Quantum Security Management R81.20 with Jumbo Hotfix Take 158 or below
Check Point Quantum Security Management R81.10, R81, R80.30, R80.20, R80.10, R80 and R77.30
Check Point Multi-Domain Security Management R82.10 with Jumbo Hotfix Take 36 or below
Check Point Multi-Domain Security Management R82 with Jumbo Hotfix Take 118 or below
Check Point Multi-Domain Security Management R81.20 with Jumbo Hotfix Take 158 or below
Check Point Multi-Domain Security Management R81.10, R81, R80.30, R80.20, R80.10, R80 and R77.30

Overview

An authentication bypass vulnerability has been reported in Check Point Quantum Security Management and Multi-Domain Security Management products, which could allow an unauthenticated remote attacker to obtain administrative access to the affected management server and modify security policies and configurations.

Target Audience:
All organizations and individuals using the affected Check Point products.

Risk Assessment:
Critical risk of unauthorized administrative access to the affected management server.

Impact Assessment:
Potential for authentication bypass, unauthorized administrative access, modification of security policies and security configurations, and compromise of the integrity and security of the affected management server.

Description

Check Point Quantum Security Management and Multi-Domain Security Management provide centralized management capabilities for Check Point security deployments.

An authentication bypass vulnerability exists in Check Point Quantum Security Management and Multi-Domain Security Management products due to improper authentication in the SmartConsole login process.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to obtain an application login token and authenticate to the affected management server with full administrative privileges. The attacker may subsequently modify security policies and security configurations.

Solution

Apply appropriate security updates and mitigations as recommended by the vendor.
https://support.checkpoint.com/results/sk/sk185169/

Vendor Information

Check Point
https://support.checkpoint.com/results/sk/sk185169/

References

https://support.checkpoint.com/results/sk/sk185169/

CVE Name
CVE-2026-16232

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-22902657

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India