Read the docs
TI-2026-13573 Aliases CVE-2026-16232GHSA-m2xx-23gx-734v

Authentication Bypass in the SmartConsole Login Process Using an Application Token

Priority CRITICAL 99Exploited in the wildCWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-287.

Summary

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.

Why it matters now

Exploitation Active In CISA KEV since 2026-07-22CISA due date 2026-07-25
EPSS 0.03517 89th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Check PointQuantum Security ManagementR82.10 with Jumbo Hotfix Take 36 or below; R82 with Jumbo Hotfix Take 118 or below; R81.20 with Jumbo Hotfix Take 158 or below; R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30—No fix listedCNA
Check PointMulti-Domain Security ManagementR82.10 with Jumbo Hotfix Take 36 or below; R82 with Jumbo Hotfix Take 118 or below; R81.20 with Jumbo Hotfix Take 158 or below; R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30—No fix listedCNA
  • Quantum Security Management VendorCheck Point Affected R82.10 with Jumbo Hotfix Take 36 or below; R82 with Jumbo Hotfix Take 118 or below; R81.20 with Jumbo Hotfix Take 158 or below; R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30 Fixed in — No fix listed CNA
  • Multi-Domain Security Management VendorCheck Point Affected R82.10 with Jumbo Hotfix Take 36 or below; R82 with Jumbo Hotfix Take 118 or below; R81.20 with Jumbo Hotfix Take 158 or below; R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30 Fixed in — No fix listed CNA

CPE configurations NVD · 122

CPEVersionsRoleVendor
cpe:2.3:a:checkpoint:multi-domain_security_management:*:*:*:*:*:*:*:*r77.30 to before r81.20VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:-:*:*:*:*:*:*r81.20VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_10:*:*:*:*:*:*r81.20 take_10VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_101:*:*:*:*:*:*r81.20 take_101VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_103:*:*:*:*:*:*r81.20 take_103VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_105:*:*:*:*:*:*r81.20 take_105VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_111:*:*:*:*:*:*r81.20 take_111VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_113:*:*:*:*:*:*r81.20 take_113VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_115:*:*:*:*:*:*r81.20 take_115VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_118:*:*:*:*:*:*r81.20 take_118VulnerableCheck Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:*:*:*:*:*:*:*:* Versions r77.30 to before r81.20 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:-:*:*:*:*:*:* Versions r81.20 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_10:*:*:*:*:*:* Versions r81.20 take_10 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_101:*:*:*:*:*:* Versions r81.20 take_101 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_103:*:*:*:*:*:* Versions r81.20 take_103 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_105:*:*:*:*:*:* Versions r81.20 take_105 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_111:*:*:*:*:*:* Versions r81.20 take_111 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_113:*:*:*:*:*:* Versions r81.20 take_113 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_115:*:*:*:*:*:* Versions r81.20 take_115 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_118:*:*:*:*:*:* Versions r81.20 take_118 Vulnerable ·Check Point
Show 112 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_119:*:*:*:*:*:*r81.20 take_119VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_120:*:*:*:*:*:*r81.20 take_120VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_122:*:*:*:*:*:*r81.20 take_122VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_126:*:*:*:*:*:*r81.20 take_126VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_127:*:*:*:*:*:*r81.20 take_127VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_14:*:*:*:*:*:*r81.20 take_14VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_141:*:*:*:*:*:*r81.20 take_141VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_146:*:*:*:*:*:*r81.20 take_146VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_24:*:*:*:*:*:*r81.20 take_24VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_26:*:*:*:*:*:*r81.20 take_26VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_38:*:*:*:*:*:*r81.20 take_38VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_41:*:*:*:*:*:*r81.20 take_41VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_43:*:*:*:*:*:*r81.20 take_43VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_45:*:*:*:*:*:*r81.20 take_45VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_53:*:*:*:*:*:*r81.20 take_53VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_54:*:*:*:*:*:*r81.20 take_54VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_65:*:*:*:*:*:*r81.20 take_65VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_70:*:*:*:*:*:*r81.20 take_70VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_76:*:*:*:*:*:*r81.20 take_76VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_79:*:*:*:*:*:*r81.20 take_79VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_8:*:*:*:*:*:*r81.20 take_8VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_84:*:*:*:*:*:*r81.20 take_84VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_89:*:*:*:*:*:*r81.20 take_89VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_90:*:*:*:*:*:*r81.20 take_90VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_92:*:*:*:*:*:*r81.20 take_92VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_96:*:*:*:*:*:*r81.20 take_96VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_98:*:*:*:*:*:*r81.20 take_98VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_99:*:*:*:*:*:*r81.20 take_99VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:-:*:*:*:*:*:*r82VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_10:*:*:*:*:*:*r82 take_10VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_103:*:*:*:*:*:*r82 take_103VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_107:*:*:*:*:*:*r82 take_107VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_12:*:*:*:*:*:*r82 take_12VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_14:*:*:*:*:*:*r82 take_14VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_18:*:*:*:*:*:*r82 take_18VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_19:*:*:*:*:*:*r82 take_19VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_25:*:*:*:*:*:*r82 take_25VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_33:*:*:*:*:*:*r82 take_33VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_34:*:*:*:*:*:*r82 take_34VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_36:*:*:*:*:*:*r82 take_36VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_39:*:*:*:*:*:*r82 take_39VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_41:*:*:*:*:*:*r82 take_41VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_43:*:*:*:*:*:*r82 take_43VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_44:*:*:*:*:*:*r82 take_44VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_60:*:*:*:*:*:*r82 take_60VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_73:*:*:*:*:*:*r82 take_73VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_91:*:*:*:*:*:*r82 take_91VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:-:*:*:*:*:*:*r82.10VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_19:*:*:*:*:*:*r82.10 take_19VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_24:*:*:*:*:*:*r82.10 take_24VulnerableCheck Point
cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_6:*:*:*:*:*:*r82.10 take_6VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:*r77.30 to before r81.20VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:-:*:*:*:*:*:*r81.20VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_10:*:*:*:*:*:*r81.20 take_10VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_101:*:*:*:*:*:*r81.20 take_101VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_103:*:*:*:*:*:*r81.20 take_103VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_105:*:*:*:*:*:*r81.20 take_105VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_111:*:*:*:*:*:*r81.20 take_111VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_113:*:*:*:*:*:*r81.20 take_113VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_115:*:*:*:*:*:*r81.20 take_115VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_118:*:*:*:*:*:*r81.20 take_118VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_119:*:*:*:*:*:*r81.20 take_119VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_120:*:*:*:*:*:*r81.20 take_120VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_122:*:*:*:*:*:*r81.20 take_122VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_126:*:*:*:*:*:*r81.20 take_126VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_127:*:*:*:*:*:*r81.20 take_127VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_14:*:*:*:*:*:*r81.20 take_14VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_141:*:*:*:*:*:*r81.20 take_141VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_146:*:*:*:*:*:*r81.20 take_146VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_24:*:*:*:*:*:*r81.20 take_24VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_26:*:*:*:*:*:*r81.20 take_26VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_38:*:*:*:*:*:*r81.20 take_38VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_41:*:*:*:*:*:*r81.20 take_41VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_43:*:*:*:*:*:*r81.20 take_43VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_45:*:*:*:*:*:*r81.20 take_45VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_53:*:*:*:*:*:*r81.20 take_53VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_54:*:*:*:*:*:*r81.20 take_54VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_65:*:*:*:*:*:*r81.20 take_65VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_70:*:*:*:*:*:*r81.20 take_70VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_76:*:*:*:*:*:*r81.20 take_76VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_79:*:*:*:*:*:*r81.20 take_79VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_8:*:*:*:*:*:*r81.20 take_8VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_84:*:*:*:*:*:*r81.20 take_84VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_89:*:*:*:*:*:*r81.20 take_89VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_90:*:*:*:*:*:*r81.20 take_90VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_92:*:*:*:*:*:*r81.20 take_92VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_96:*:*:*:*:*:*r81.20 take_96VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_98:*:*:*:*:*:*r81.20 take_98VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_99:*:*:*:*:*:*r81.20 take_99VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:-:*:*:*:*:*:*r82VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_10:*:*:*:*:*:*r82 take_10VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_103:*:*:*:*:*:*r82 take_103VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_107:*:*:*:*:*:*r82 take_107VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_12:*:*:*:*:*:*r82 take_12VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_14:*:*:*:*:*:*r82 take_14VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_18:*:*:*:*:*:*r82 take_18VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_19:*:*:*:*:*:*r82 take_19VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_25:*:*:*:*:*:*r82 take_25VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_33:*:*:*:*:*:*r82 take_33VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_34:*:*:*:*:*:*r82 take_34VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_36:*:*:*:*:*:*r82 take_36VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_39:*:*:*:*:*:*r82 take_39VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_41:*:*:*:*:*:*r82 take_41VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_43:*:*:*:*:*:*r82 take_43VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_44:*:*:*:*:*:*r82 take_44VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_60:*:*:*:*:*:*r82 take_60VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_73:*:*:*:*:*:*r82 take_73VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82:take_91:*:*:*:*:*:*r82 take_91VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82.10:-:*:*:*:*:*:*r82.10VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_19:*:*:*:*:*:*r82.10 take_19VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_24:*:*:*:*:*:*r82.10 take_24VulnerableCheck Point
cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_6:*:*:*:*:*:*r82.10 take_6VulnerableCheck Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_119:*:*:*:*:*:* Versions r81.20 take_119 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_120:*:*:*:*:*:* Versions r81.20 take_120 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_122:*:*:*:*:*:* Versions r81.20 take_122 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_126:*:*:*:*:*:* Versions r81.20 take_126 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_127:*:*:*:*:*:* Versions r81.20 take_127 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_14:*:*:*:*:*:* Versions r81.20 take_14 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_141:*:*:*:*:*:* Versions r81.20 take_141 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_146:*:*:*:*:*:* Versions r81.20 take_146 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_24:*:*:*:*:*:* Versions r81.20 take_24 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_26:*:*:*:*:*:* Versions r81.20 take_26 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_38:*:*:*:*:*:* Versions r81.20 take_38 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_41:*:*:*:*:*:* Versions r81.20 take_41 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_43:*:*:*:*:*:* Versions r81.20 take_43 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_45:*:*:*:*:*:* Versions r81.20 take_45 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_53:*:*:*:*:*:* Versions r81.20 take_53 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_54:*:*:*:*:*:* Versions r81.20 take_54 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_65:*:*:*:*:*:* Versions r81.20 take_65 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_70:*:*:*:*:*:* Versions r81.20 take_70 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_76:*:*:*:*:*:* Versions r81.20 take_76 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_79:*:*:*:*:*:* Versions r81.20 take_79 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_8:*:*:*:*:*:* Versions r81.20 take_8 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_84:*:*:*:*:*:* Versions r81.20 take_84 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_89:*:*:*:*:*:* Versions r81.20 take_89 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_90:*:*:*:*:*:* Versions r81.20 take_90 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_92:*:*:*:*:*:* Versions r81.20 take_92 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_96:*:*:*:*:*:* Versions r81.20 take_96 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_98:*:*:*:*:*:* Versions r81.20 take_98 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_99:*:*:*:*:*:* Versions r81.20 take_99 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:-:*:*:*:*:*:* Versions r82 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_10:*:*:*:*:*:* Versions r82 take_10 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_103:*:*:*:*:*:* Versions r82 take_103 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_107:*:*:*:*:*:* Versions r82 take_107 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_12:*:*:*:*:*:* Versions r82 take_12 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_14:*:*:*:*:*:* Versions r82 take_14 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_18:*:*:*:*:*:* Versions r82 take_18 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_19:*:*:*:*:*:* Versions r82 take_19 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_25:*:*:*:*:*:* Versions r82 take_25 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_33:*:*:*:*:*:* Versions r82 take_33 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_34:*:*:*:*:*:* Versions r82 take_34 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_36:*:*:*:*:*:* Versions r82 take_36 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_39:*:*:*:*:*:* Versions r82 take_39 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_41:*:*:*:*:*:* Versions r82 take_41 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_43:*:*:*:*:*:* Versions r82 take_43 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_44:*:*:*:*:*:* Versions r82 take_44 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_60:*:*:*:*:*:* Versions r82 take_60 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_73:*:*:*:*:*:* Versions r82 take_73 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_91:*:*:*:*:*:* Versions r82 take_91 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:-:*:*:*:*:*:* Versions r82.10 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_19:*:*:*:*:*:* Versions r82.10 take_19 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_24:*:*:*:*:*:* Versions r82.10 take_24 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_6:*:*:*:*:*:* Versions r82.10 take_6 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:* Versions r77.30 to before r81.20 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:-:*:*:*:*:*:* Versions r81.20 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_10:*:*:*:*:*:* Versions r81.20 take_10 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_101:*:*:*:*:*:* Versions r81.20 take_101 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_103:*:*:*:*:*:* Versions r81.20 take_103 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_105:*:*:*:*:*:* Versions r81.20 take_105 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_111:*:*:*:*:*:* Versions r81.20 take_111 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_113:*:*:*:*:*:* Versions r81.20 take_113 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_115:*:*:*:*:*:* Versions r81.20 take_115 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_118:*:*:*:*:*:* Versions r81.20 take_118 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_119:*:*:*:*:*:* Versions r81.20 take_119 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_120:*:*:*:*:*:* Versions r81.20 take_120 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_122:*:*:*:*:*:* Versions r81.20 take_122 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_126:*:*:*:*:*:* Versions r81.20 take_126 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_127:*:*:*:*:*:* Versions r81.20 take_127 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_14:*:*:*:*:*:* Versions r81.20 take_14 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_141:*:*:*:*:*:* Versions r81.20 take_141 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_146:*:*:*:*:*:* Versions r81.20 take_146 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_24:*:*:*:*:*:* Versions r81.20 take_24 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_26:*:*:*:*:*:* Versions r81.20 take_26 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_38:*:*:*:*:*:* Versions r81.20 take_38 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_41:*:*:*:*:*:* Versions r81.20 take_41 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_43:*:*:*:*:*:* Versions r81.20 take_43 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_45:*:*:*:*:*:* Versions r81.20 take_45 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_53:*:*:*:*:*:* Versions r81.20 take_53 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_54:*:*:*:*:*:* Versions r81.20 take_54 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_65:*:*:*:*:*:* Versions r81.20 take_65 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_70:*:*:*:*:*:* Versions r81.20 take_70 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_76:*:*:*:*:*:* Versions r81.20 take_76 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_79:*:*:*:*:*:* Versions r81.20 take_79 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_8:*:*:*:*:*:* Versions r81.20 take_8 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_84:*:*:*:*:*:* Versions r81.20 take_84 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_89:*:*:*:*:*:* Versions r81.20 take_89 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_90:*:*:*:*:*:* Versions r81.20 take_90 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_92:*:*:*:*:*:* Versions r81.20 take_92 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_96:*:*:*:*:*:* Versions r81.20 take_96 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_98:*:*:*:*:*:* Versions r81.20 take_98 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_99:*:*:*:*:*:* Versions r81.20 take_99 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:-:*:*:*:*:*:* Versions r82 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_10:*:*:*:*:*:* Versions r82 take_10 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_103:*:*:*:*:*:* Versions r82 take_103 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_107:*:*:*:*:*:* Versions r82 take_107 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_12:*:*:*:*:*:* Versions r82 take_12 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_14:*:*:*:*:*:* Versions r82 take_14 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_18:*:*:*:*:*:* Versions r82 take_18 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_19:*:*:*:*:*:* Versions r82 take_19 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_25:*:*:*:*:*:* Versions r82 take_25 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_33:*:*:*:*:*:* Versions r82 take_33 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_34:*:*:*:*:*:* Versions r82 take_34 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_36:*:*:*:*:*:* Versions r82 take_36 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_39:*:*:*:*:*:* Versions r82 take_39 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_41:*:*:*:*:*:* Versions r82 take_41 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_43:*:*:*:*:*:* Versions r82 take_43 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_44:*:*:*:*:*:* Versions r82 take_44 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_60:*:*:*:*:*:* Versions r82 take_60 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_73:*:*:*:*:*:* Versions r82 take_73 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82:take_91:*:*:*:*:*:* Versions r82 take_91 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82.10:-:*:*:*:*:*:* Versions r82.10 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_19:*:*:*:*:*:* Versions r82.10 take_19 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_24:*:*:*:*:*:* Versions r82.10 take_24 Vulnerable ·Check Point
  • cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_6:*:*:*:*:*:* Versions r82.10 take_6 Vulnerable ·Check Point

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-07-22 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2026-16232
  3. 2026-10-03 Alias added: GHSA-m2xx-23gx-734v
  4. 2026-10-25 EPSS moved to the 50th–90th percentile

References

Patch 1

  • TI-2026-63071 Directory Traversal and File upload allows execution of arbitrary script on the Management Server KEVCVSS 3.1CRITICAL 9.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences