Exploit for Improper Authentication in Checkpoint Multi-Domain Security Management

githubexploit · 2026-08-03

Description

Check Point SmartConsole authentication bypass PoC enabling unauthenticated admin access for authorized testing.

Affected Checkpoint Multi-domain Security Management versions

Checkpoint Multi-domain Security Management< r81.20, R82, r82.10

CVSS 9.3 for CVE-2026-16232

9.3

HIGH SEVERITY

Version 4.0

VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:NONE

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

72.1%higher than 99.4% of all CVEs

Updated 2026-09-02

Exploit Details

Modified:2026-08-03 12:56

Last Seen:2026-08-03 13:05

Reporter:HackSpeak

Written in:Python

Last commit:2026-08-03

Tags

Check PointSmartConsoleauthentication bypassunauthenticated accessauthorized testing

Other exploits for CVE-2026-16232

2026-09-02 KitPloitKITPLOIT

2026-09-01 KitPloitKITPLOIT

2026-08-25 sfewer-r7PACKETSTORMRuby

Exploit for Improper Authentication in Checkpoint Multi-Domain_Security_Management

2026-07-28 sfewer-r7GITHUB

2026-07-22 checkpointUNKNOWN

Check Point SmartConsole Authentication Bypass Run Script RCE

2026-07-22 sfewer-r7METASPLOITRuby

Exploit Code

README3 lines

## https://sploitus.com/exploit?id=A5AF3F1F-8333-5A20-BB70-883F91B3061C
# checkpoint-smartconsole-poc
CVE-2026-16232 (Check Point SmartConsole authentication bypass) PoC - unauth to admin; for authorized security testing