WID-SEC-W-2026-2495

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Check Point SmartConsole: Mehrere Schwachstellen

view advisory published 2026-07-23

Ein Angreifer kann mehrere Schwachstellen in Check Point SmartConsole ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorzugriff, zu erlangen oder beliebigen Code auszuführen – sogar mit Root-Rechten.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2026-62145US——
A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.
CVE-2026-62144US——
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative c…
CVE-2026-16232UScritical9.8OT criticalKEV
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to au…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan