Check Point Management Products Affected by High-Severity Authentication Bypass Vulnerability CVE-2026-16232 Already Under Active Exploitation
Check Point Software Technologies has revealed a critical vulnerability in its security management products that permits authentication bypass and has already been exploited in real-world attacks.
The issue, identified as CVE-2026-16232, carries a High severity rating. It stems from a flaw in the SmartConsole login process that allows an attacker with network access to the Management Server to obtain administrator rights without providing valid credentials.
Once administrative access is achieved, threat actors could modify security settings, alter policies, and potentially compromise the entire protected environment.
The vulnerability affects the following appliance software versions: R82.10, R82, and R81.20. Older releases, including R77.30 and subsequent unsupported versions, are also impacted.
Check Point released its official security advisory on July 19, 2026, and strongly recommends that customers investigate possible intrusions and implement the necessary updates or workarounds without delay.
Related articles
Agent, Scan or Beyond: Modern Methods for Comprehensive Infrastructure Vulnerability Scanning
The eighth installment in the Vulnerability Management for Beginners series explains why traditional scanning approaches no longer cover today's dynamic environments. It details three classic methods—Host Discovery, Pentest, and Audit—alongside agent-based scanning, cloud snapshot techniques, passive traffic analysis, container and SCA tools, and integrations with existing IT systems. The guide stresses that agents from Tenable and Qualys complement but do not replace network scanning, while Orca Security and Wiz pioneered disk snapshot analysis for short-lived cloud instances. It also covers container image scanning with Trivy and Grype before deployment, passive monitoring for OT environments, and the importance of combining multiple data sources to eliminate blind spots. Practical recommendations include scanning frequency by asset type and six post-scan steps for effective remediation.
CVE-2026-20349: Cisco ASA and FTD Firewalls Face Remote DoS in SSL VPN, Already Exploited
Cisco has disclosed a high-severity denial-of-service vulnerability affecting its Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense products. The flaw, tracked as CVE-2026-20349, resides in the SSL VPN component and allows unauthenticated remote attackers to trigger device reboots by sending specially crafted HTTP requests. The issue also impacts FTD deployments using Zero Trust Network Access. With a CVSS v3.1 base score of 8.6, the vulnerability has already been observed in active exploitation campaigns since August 2026. Cisco released hotfixes for both affected platforms and strongly urges immediate updates, while confirming that Secure Firewall Management Center remains unaffected.
Adobe Releases Third Emergency Patch for Campaign Classic in Two Weeks, Fixing Critical RCE Vulnerabilities
Adobe has issued another urgent security update for Adobe Campaign Classic after discovering multiple critical vulnerabilities that affect the previous patches released on July 29 and August 3. The new advisory, published on August 11, 2026, addresses three CVEs rated Critical, including two remote code execution flaws with CVSSv3.1 base scores of 10.0. These authorization bypass issues allow unauthenticated attackers to execute arbitrary code remotely. The affected versions include 7.4.3 build 9398 and build 9399, which were themselves emergency fixes issued only days earlier. Adobe urges all customers to apply the latest update immediately due to the high risk of exploitation. This marks the third high-severity patch for the product within a two-week period.
SonicWall Global Management System Hit by Critical RCE and Path Traversal Vulnerabilities
SonicWall has disclosed six vulnerabilities in its SonicWall Global Management System (GMS) management product, with the highest-severity issues rated Critical. The most severe flaw, CVE-2026-66147, resides in the Dispatcher Service and allows unauthenticated remote code execution through crafted requests that inject commands. A second critical issue, CVE-2026-66145, stems from improper handling of zip archive extraction and enables path traversal attacks that can read sensitive data or write arbitrary files without authentication. Both vulnerabilities received CVSSv3 base scores above 9.0. The flaws affect both the virtual appliance and Windows versions of GMS. SonicWall released an advisory on August 11 urging immediate application of the available updates.