VulnerabilityBleeping Computer
9.3 — CRITICAL
Check Point warns of SmartConsole zero-day exploited in attacks
Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company's SmartConsole graphical user interface (GUI) admin panel. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Check Point has identified a zero-day vulnerability in its SmartConsole GUI admin panel, allowing attackers to bypass authentication and gain administrator privileges. This vulnerability is being actively exploited by malicious actors.
⚙️Technical Details
💥Impact Assessment
Severity: Critical
Who Is at Risk
Government Agencies, Organizations with Check Point SmartConsole, and potentially other organizations with exposed Management Server IP addresses
🛡️Recommended Actions
1Apply the patch from Check Point's support website as soon as possible
2Limit Trusted Clients to trusted IP addresses/subnets and ensure management access is blocked for non-authorized IP addresses
3Regularly check SmartConsole logs for signs of compromise using the provided query
📦Affected Products
Checkpoint Gaia EmbeddedCheckpoint Gaia OsCheckpoint Quantum Spark 1530Checkpoint Quantum Spark 1535Checkpoint Quantum Spark 1550Checkpoint Quantum Spark 1555Checkpoint Quantum Spark 1570Checkpoint Quantum Spark 1570RCheckpoint Quantum Spark 1575Checkpoint Quantum Spark 1575R
🔐NVD Verified DataVERIFIED
CVE-2026-16232 ↗CVSS 9.1 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NWeaknesses
CWE-287
CVE-2026-50751 ↗CVSS 9.3 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:NWeaknesses
CWE-287
Affected Products (CPE)
Checkpoint Gaia EmbeddedCheckpoint Gaia OsCheckpoint Quantum Spark 1530Checkpoint Quantum Spark 1535Checkpoint Quantum Spark 1550
CVE-2024-24919 ↗CVSS 8.6 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NWeaknesses
CWE-200
Affected Products (CPE)
Checkpoint Cloudguard Network SecurityCheckpoint Quantum Security GatewayCheckpoint Quantum Security Gateway FirmwareCheckpoint Quantum SparkCheckpoint Quantum Spark Firmware
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.