Description
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.
CVSS breakdown
CVSS 4.0
Attack Vector
Network
Attack Complexity
Low
Attack Requirements
None
Privileges Required
None
User Interaction
None
Confidentiality (Vulnerable System)
High
Integrity (Vulnerable System)
High
Availability (Vulnerable System)
High
Confidentiality (Subsequent System)
None
Integrity (Subsequent System)
None
Availability (Subsequent System)
None
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected products
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security ManagementR82.10 with Jumbo Hotfix Take 36 or below – R82.10 with Jumbo Hotfix Take 36 or below
- checkpoint / Multi-Domain Security ManagementR82 with Jumbo Hotfix Take 118 or below – R82 with Jumbo Hotfix Take 118 or below
- checkpoint / Multi-Domain Security ManagementR81.20 with Jumbo Hotfix Take 158 or below – R81.20 with Jumbo Hotfix Take 158 or below
- checkpoint / Multi-Domain Security ManagementR81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30 – R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
- checkpoint / Multi-Domain Security Managementr77.30 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr81.20 – r81.20
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82 – r82
- checkpoint / Multi-Domain Security Managementr82.10 – r82.10
- checkpoint / Multi-Domain Security Managementr82.10 – r82.10
- checkpoint / Multi-Domain Security Managementr82.10 – r82.10
- checkpoint / Multi-Domain Security Managementr82.10 – r82.10
- checkpoint / Quantum Security Managementr82.10 – r82.10
- checkpoint / Quantum Security ManagementR82 with Jumbo Hotfix Take 118 or below – R82 with Jumbo Hotfix Take 118 or below
- checkpoint / Quantum Security ManagementR81.20 with Jumbo Hotfix Take 158 or below – R81.20 with Jumbo Hotfix Take 158 or below
- checkpoint / Quantum Security ManagementR81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30 – R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
- checkpoint / Quantum Security Managementr82.10 – r82.10
- checkpoint / Quantum Security Managementr82.10 – r82.10
- checkpoint / Quantum Security Managementr82.10 – r82.10
- checkpoint / Quantum Security Managementr77.30 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security ManagementR82.10 with Jumbo Hotfix Take 36 or below – R82.10 with Jumbo Hotfix Take 36 or below
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr81.20 – r81.20
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
- checkpoint / Quantum Security Managementr82 – r82
Exploits & proofs of concept
- nucleiCheck Point Security Management Server - SmartConsole Authentication Bypassby sfewer-r7,DhiyaneshDk
News coverage
- Public PoC Released for Exploited Check Point SmartConsole Authentication BypassThe Hacker News · 7/29/2026
- Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin AccessThe Hacker News · 7/23/2026
References
Updated 5m ago · 8 sources