Check Point has warned customers about a critical vulnerability, CVE-2026-16232, which affects Security Management and Multi-Domain Management products. The bug allows an attacker to bypass authentication, gain administrator privileges, and change security policies. The vulnerability is likely to be exploited in the wild.

Along with CVE-2026-16232, developers also fixed two other issues: a critical vulnerability, CVE-2026-62144, which allows authentication bypass and elevation of privilege in Security Management and Multi-Domain Management, as well as a bug, CVE-2026-62145, which allowed a local user to elevate privileges in Security Gateway, Security Management products.

Source: xakep.ru