Critical Authentication Bypass in Check Point SmartConsole CVE-2026-16232
CVE-2026-16232 is a critical authentication bypass vulnerability (CVSS 9.3) affecting Check Point SmartConsole and Security Management Servers. The flaw originates from a broken trust boundary in the authenticateRemoteApplication() function, where the server prioritizes an attacker-provided Secure Internal Communication (SIC) Distinguished Name (DN) over the verified peer certificate DN. This allows unauthenticated attackers to forge application identities and mint administrative Single Sign-On (SSO) tickets via SOAP APIs. Successful exploitation grants full administrative control over the management server and all downstream security gateways, enabling malicious policy modification and disabling of security auditing. Remediation requires applying the vendor's jumbo hotfix and implementing strict IP-based access controls.