Critical Check Point SmartConsole Flaw (CVE‑2026‑16232) Actively Exploited
Check Point disclosed CVE‑2026‑16232, a CVSS 9.3 authentication bypass that lets an unauthenticated remote attacker grab a full‑admin token on SmartConsole. The bug is being weaponised in the wild, prompting a July 22 hot‑fix and a CISA mandate for federal systems.