What it is about

Check Point SmartConsole ist eine Management-Anwendung zur zentralen Verwaltung von Check Point Sicherheitsgateways und -produkten. Ein Angreifer kann mehrere Schwachstellen in Check Point SmartConsole ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorzugriff, zu erlangen oder beliebigen Code auszuführen – sogar mit Root-Rechten.

Under what conditions?

The BSI does not name any particular preconditions. Exploitable remotely according to the BSI.

What can happen in the worst case

An attacker could use the vulnerability to

• erweiterte Berechtigungen
• einschließlich Administratorzugriff und zu erlangen oder beliebigen Code auszuführen – sogar mit Root-Rechten

Am I affected?

Affected according to the BSI:

• Check Point SmartConsole Multi-Domain Security Management R82.10 <Jumbo Hotfix Take 36
• Check Point SmartConsole Multi-Domain Security Management R82 <Jumbo Hotfix Take 118
• Check Point SmartConsole Multi-Domain Security Management R81.20 <Jumbo Hotfix Take 158
• Check Point SmartConsole Security Management R82.10 <Jumbo Hotfix Take 36
• Check Point SmartConsole Security Management R82 <Jumbo Hotfix Take 118
• Check Point SmartConsole Security Management R81.20 <Jumbo Hotfix Take 158
• Check Point SmartConsole Security Gateway R82.10 <Jumbo Hotfix Take 36
• Check Point SmartConsole Security Gateway R82 <Jumbo Hotfix Take 118
• Check Point SmartConsole Security Gateway R81.20 <Jumbo Hotfix Take 158

The installed version is usually shown under “Help → About” or in the device’s admin interface.

What helps?

Update to at least:

• Check Point SmartConsole Multi-Domain Security Management R82.10 Jumbo Hotfix Take 36
• Check Point SmartConsole Multi-Domain Security Management R82 Jumbo Hotfix Take 118
• Check Point SmartConsole Multi-Domain Security Management R81.20 Jumbo Hotfix Take 158
• Check Point SmartConsole Security Management R82.10 Jumbo Hotfix Take 36
• Check Point SmartConsole Security Management R82 Jumbo Hotfix Take 118
• Check Point SmartConsole Security Management R81.20 Jumbo Hotfix Take 158
• Check Point SmartConsole Security Gateway R82.10 Jumbo Hotfix Take 36
• Check Point SmartConsole Security Gateway R82 Jumbo Hotfix Take 118
• Check Point SmartConsole Security Gateway R81.20 Jumbo Hotfix Take 158

Is the vulnerability already being exploited?

• CVE-2026-16232: exploited in the wild according to CISA, in the catalogue since 22.07.2026.