CVE-2026-16232
Status: AnalyzedCritical (9.3)⚠ Active exploitation
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.
CVSS
- Version: 4.0
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Base score: 9.3
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 78%
- Percentile among all scored CVEs: 100
- Score date: 9/30/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
CISA KEV — actively exploited
- Added to catalog: 7/22/2026
- Remediation due date: 7/25/2026
- Known ransomware use: Unknown
Affected technologies (2)
CWEs
- CWE-287
References
Raw JSON (NVD)
Show
{
"id": "CVE-2026-16232",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-16232",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "active"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2026-07-23T03:55:51.690584Z"
}
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
],
"cvssMetricV40": [
{
"type": "Secondary",
"source": "cve@checkpoint.com",
"cvssData": {
"Safety": "NOT_DEFINED",
"version": "4.0",
"Recovery": "NOT_DEFINED",
"baseScore": 9.3,
"Automatable": "NOT_DEFINED",
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"exploitMaturity": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"subIntegrityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"availabilityRequirement": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"subConfidentialityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"confidentialityRequirement": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED"
}
}
]
},
"affected": [
{
"source": "cve@checkpoint.com",
"affectedData": [
{
"vendor": "checkpoint",
"product": "Quantum Security Management",
"versions": [
{
"status": "affected",
"version": "R82.10 with Jumbo Hotfix Take 36 or below"
},
{
"status": "affected",
"version": "R82 with Jumbo Hotfix Take 118 or below"
},
{
"status": "affected",
"version": "R81.20 with Jumbo Hotfix Take 158 or below"
},
{
"status": "affected",
"version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
}
]
},
{
"vendor": "checkpoint",
"product": "Multi-Domain Security Management",
"versions": [
{
"status": "affected",
"version": "R82.10 with Jumbo Hotfix Take 36 or below"
},
{
"status": "affected",
"version": "R82 with Jumbo Hotfix Take 118 or below"
},
{
"status": "affected",
"version": "R81.20 with Jumbo Hotfix Take 158 or below"
},
{
"status": "affected",
"version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
}
]
}
]
}
],
"published": "2026-07-22T14:17:15.513",
"references": [
{
"url": "https://support.checkpoint.com/results/sk/sk185169",
"tags": [
"Mitigation",
"Patch",
"Vendor Advisory"
],
"source": "cve@checkpoint.com"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232",
"tags": [
"US Government Resource"
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "cve@checkpoint.com",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers."
}
],
"lastModified": "2026-08-10T19:59:12.073",
"cisaActionDue": "2026-07-25",
"cisaExploitAdd": "2026-07-22",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "831A6FD2-2397-40FC-8967-50F52E820F03",
"versionEndExcluding": "r81.20",
"versionStartIncluding": "r77.30"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60E5A48C-4ABB-46DB-BA75-132AFB408BC8"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD16B955-141C-4F13-A9BC-6CCCD96248B4"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_101:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F70DA99D-131C-46CC-B582-CB9419DB1B64"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_103:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B06457A0-ED12-4412-BB1D-1D24E0C751EA"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_105:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD7D44D8-C2D1-46C4-B9E4-29664BCFEAB4"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_111:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A7EF92D-B4CC-4868-9026-8F5DA0D14DFC"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_113:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4347D905-4E57-4D64-9B57-C406A70DC0C1"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_115:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12E1E158-790D-40D4-81FF-622307C4524E"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_118:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01DA6EEA-746F-4EB2-81C5-F7C064519D44"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_119:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD575960-0B66-48F9-BC9D-6F7DAEF0BCBC"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_120:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "776DF4D6-9CC1-4BC2-93D0-9DE2405716EA"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_122:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0AABCDA-255E-4096-8DEF-483E0373E7F7"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_126:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "236CB75E-705A-46B3-A531-29E343AA024A"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_127:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1A5645A-D22D-4B5B-86FA-29642111FEDF"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_14:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B90AA06D-C905-4811-A93A-44F787563FB0"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_141:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A1BC954-296C-4A94-847D-479825CDA84C"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_146:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BADA45FE-319D-421F-B4B6-D221D78B69CC"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_24:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CBA6E4FC-BDCC-425F-9D69-E9183548893A"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_26:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DF70422-7897-49CC-8874-A96D4CA64E11"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_38:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3240200-0517-43FD-BED2-D8AF844BF6E6"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_41:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE6FBF0A-195F-4E52-9FBF-CD9A71EF3A36"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_43:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57B969D9-DCC0-4B06-818F-CE2521C4C0C0"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_45:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA897E69-E1CE-45A1-A0DB-A7BF444484F3"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_53:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A13B8B4D-D746-432A-8833-BDF3A5A13CB4"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_54:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF0A7585-591D-4FA1-941E-55FB0207C207"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_65:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A5B10FC-D9B5-4BB2-AD82-0B9AFB2AD0DE"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_70:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECE1DDA0-9A0A-44D5-919E-24810E7131B0"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_76:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "491F74B1-998F-459A-A27D-EB01597C9B01"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_79:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A31115EC-8018-4EF3-B5D0-0F1EA2392680"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E415D02C-B30A-4210-8F14-47ABF46D4E64"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_84:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27AED864-AC5B-4FCF-9FD7-6E0D49569BB2"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_89:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABF3E632-8D50-4373-9576-0E710511D21B"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_90:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6229824-D7A7-439E-9FDD-95F753061410"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_92:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B218B25D-7722-435C-AA22-B5411E786277"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_96:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A49ABD5-57B9-4E06-AFFE-8A1269BB16C8"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_98:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BFA1E0F-A214-4150-A0BD-44B5424A667E"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_99:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "265683A2-DA16-4CDC-AE9D-CE14BAB28A79"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D16C37E-3064-4E15-8590-3B3020E4FF7E"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C01C66D8-5B48-4255-8246-9301EEA863DA"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_103:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22A0D74F-5216-40D9-B07C-8789A8E2D328"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_107:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2C763B7-B4BD-4915-A33B-9675DC2A1EA5"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC227225-ECF6-4025-B288-992ADE9B6B4B"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_14:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "673F8F1B-E64E-44D1-A793-F2B4ED56DDBD"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_18:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "927823EC-B157-4B5C-A4A3-F9D249C88E2C"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_19:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DBDDAA3-3CA1-4490-8D43-C8C5C5188A6E"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_25:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73AEA72B-8E44-4839-8651-5076EBC609B1"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_33:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B11AA664-F3C8-44A6-AD11-14AF6AFAD2E2"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_34:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D511D85-A534-49A5-A9AE-88BC624311B6"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_36:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0A2B178-FC15-4D76-9075-D605F87F350D"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_39:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1360EBA1-B59B-472E-9019-9EB560A05699"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_41:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1301887-F38A-4FE6-9614-1FCF8FDE681C"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_43:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74DA6820-BE56-4115-A058-45CFF400DAA6"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_44:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54ECA176-C752-42C6-A9B2-CF408D8C580E"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_60:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2E35CA7-FED1-44E9-B144-1B51A2D7FB8B"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_73:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBA345D3-0FE7-4BE9-BEBB-96CD4055E546"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_91:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2D4A292-EE3B-4A3A-9B16-E03626F82832"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9381DBDF-5CE2-454C-BE04-859C9A197C90"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_19:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7442AF7-C511-4A15-AA85-FCB741F6A733"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_24:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9E02250-00AF-4684-A9A0-E9E4032DEA66"
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27057734-9870-4BA0-9A29-DB03FDFE485F"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5E1C45D-3697-4D7D-B9B6-7A0B31D4703B",
"versionEndExcluding": "r81.20",
"versionStartIncluding": "r77.30"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8F7304B-C04F-4C5B-9E98-D736C55A0AE2"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A897D6EA-56D9-4246-9985-9BCE0B5B575E"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_101:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A93B1873-08AD-45D4-9F27-D76DEBD445E4"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_103:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C29DD086-7438-45BD-B1DC-B20D2753A7E2"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_105:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7792771-5225-4B15-8B12-94AC5DB158D8"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_111:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54CF3193-F101-4BD9-952F-47886308799B"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_113:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F012878A-86CE-4881-94C1-CA39420E2888"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_115:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8A50B35-2459-43C2-840B-D3BC78837C6A"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_118:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C62D9794-379F-4722-B467-0CFE65A12B80"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_119:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D92A32EE-259C-423B-B422-A765EF4426F9"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_120:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "668D309B-DA82-4EC4-9F09-A5772BC17447"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_122:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1230C289-7789-471F-9EA3-2FE2DCDA6981"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_126:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96187221-D11F-4CFA-83AD-0548A528C320"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_127:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF79E967-AEE7-494E-B8E4-94ABFE8BEFB7"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_14:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E450F71D-626F-4515-91A2-5F4FCD8FE21D"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_141:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E73C0C0-227D-42EA-9E5F-BD9120E94213"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_146:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "926F2DA0-8168-4EED-BB8E-E9A7BC185970"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_24:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "273F628E-2889-412C-BC02-82FEEF4CE6AF"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_26:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40CC00A2-E57F-49B8-BD9A-A3107258EFF9"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_38:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38C33CF8-3FA4-4775-91CF-83B9A4B51B5D"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_41:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "186C5B76-630C-483E-9C44-27BA00A1365B"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_43:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "965C32C2-BAD2-415A-B8F3-A5B2A96C077F"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_45:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D7B7908-F110-4937-A16F-E942F7EE94E8"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_53:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7CE4E97-2553-4B54-9B49-2AEFFF1E97DF"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_54:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3BB26FE-A7A4-4C0C-82E0-3B690C08AF4D"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_65:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC0BAF78-22E6-4F90-885D-654A317832C3"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_70:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CEFB387-F28B-4A26-B0BD-A99D88765CF2"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_76:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05C5D50F-DD77-4B91-9B98-EA79206E3AEC"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_79:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7A2F23D-A588-4895-91CB-F4726D244E71"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "496C913F-16A4-4710-80EB-0444ED57F981"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_84:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7B7D466-132A-4584-B6D8-68C05F02E3AE"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_89:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8DDE050-D1E9-4E42-A511-FE85C5482EAD"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_90:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2508B0C0-F3F7-4993-A90B-31DBD299C7EB"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_92:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB51FD59-0119-4335-851F-65F108E34885"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_96:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F26A6EE5-5083-42BE-822A-66BB279B68F6"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_98:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3BC31FE-EE44-4919-96F1-A3CD9EB2E6F9"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_99:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54AF1EBC-02AE-4303-93E9-ACE2C15831B3"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A4DD35F-132E-4CB4-846C-8C0A0DAE11A3"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28B96884-0ED3-4B3F-9FF2-D9826C6A11C8"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_103:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "498B5193-9227-408B-BB96-93D47FE6C136"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_107:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F5BF964-A06C-46B4-BBAF-B992F2BFE5BA"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25CBBD3E-F6BC-44A8-ADF8-A2A683C4FD90"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_14:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A593B6C5-F968-4C08-9CEC-0D04CBCFCBAE"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_18:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B08AEDE4-10E7-49B1-A7E3-343C16651E0C"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_19:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F52CCFD6-8E42-4704-BCDB-8D4743AD8878"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_25:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1A5BD3C-6C81-4948-BD6E-351AE54E051B"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_33:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92E9C407-AAF6-4FE8-ABF8-28E78090C2F5"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_34:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17892B1E-CFC8-4A21-A654-0C67AE1CEA02"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_36:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "782C1482-BF59-4663-A17F-A10247715223"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_39:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECB15DB7-ACF9-4D7E-8BAC-C65634E7C813"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_41:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5E45EF8-9B5E-4AAB-8952-9358AC1625D4"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_43:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAA7ADEB-B8BF-41C3-B8F9-44B3F617A8B6"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_44:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "539F141A-9129-418A-8C86-8DF565A0106B"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_60:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F1C55C8-9EFD-4B74-A1B9-83E1B8B4B306"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_73:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC2BB169-1FE9-4DD9-95DD-C2875068B976"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_91:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7924252E-97BB-4ADE-81CA-4EB974B6FD51"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4005C231-9EA2-40A5-A2F0-5A94EA498E96"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_19:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "395F93BF-DAC3-4213-AA34-D708570B5B9F"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_24:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF84D1C9-E656-4CBF-85DB-3AE434DF87F0"
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05B0445D-E33E-4F3F-B21C-B6988C8F0BBB"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@checkpoint.com",
"cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"cisaVulnerabilityName": "Check Point SmartConsole Improper Authentication Vulnerability"
}