{"schema":"vulnpedia.poc/1","cve":"CVE-2026-16232","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-07-22","ransomware":false},"epss":{"score":0.03517,"percentile":0.89136},"cvss":{"version":"4.0","score":9.3,"severity":"CRITICAL","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/checkpoint_smartconsole_cve_2026_16232_rce.rb","executable":true,"sourceId":"exploit/linux/misc/checkpoint_smartconsole_cve_2026_16232_rce","description":"Check Point SmartConsole Authentication Bypass Run Script RCE","verification":"catalogued","source":"metasploit","modified":"2026-08-25 17:38:56 +0000","origins":[{"source":"metasploit","sourceId":"exploit/linux/misc/checkpoint_smartconsole_cve_2026_16232_rce","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/checkpoint_smartconsole_cve_2026_16232_rce.rb"},{"source":"metasploit","sourceId":"exploit/linux/misc/checkpoint_smartconsole_cve_2026_16232_rce","modified":"2026-08-25 17:38:56 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/checkpoint_smartconsole_cve_2026_16232_rce.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f2485d822793","executable":false,"sourceId":"f2485d822793","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-19T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f2485d822793","modified":"2026-07-19T00:00:00Z","url":"https://vulncheck.com/xdb/f2485d822793"}],"repositoryUrl":"https://github.com/sfewer-r7/CVE-2026-16232"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/9eaed71fb1ff","executable":false,"sourceId":"9eaed71fb1ff","verification":"catalogued","source":"vulncheck-kev","modified":"2026-07-19T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9eaed71fb1ff","modified":"2026-07-19T00:00:00Z","url":"https://vulncheck.com/xdb/9eaed71fb1ff"}],"repositoryUrl":"https://github.com/HackSpeak/CVE-2026-16232"}],"poc_candidates":[{"url":"https://github.com/WadesWeaponShed/Check-Point-Trusted-Access-Review","source":"poc-in-github","sourceId":"CVE-2026-16232","description":"Local web app for conducting a Check Point Trusted Access Review. This scanner is built specifically to look for configuration issues around CVE-2026-16232, CVE-2026-62144 , and CVE-2026-62145. This tool is not created or supported by Check Point and should be used at your own risk.","modified":"2026-07-22T17:56:57Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-16232","url":"https://github.com/WadesWeaponShed/Check-Point-Trusted-Access-Review"},{"source":"poc-in-github","sourceId":"CVE-2026-16232","modified":"2026-07-22T17:56:57Z","url":"https://github.com/WadesWeaponShed/Check-Point-Trusted-Access-Review"}],"tags":[]},{"url":"https://github.com/sfewer-r7/CVE-2026-16232","source":"poc-in-github","sourceId":"CVE-2026-16232","description":"A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login process using an application token.","modified":"2026-10-25T12:13:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-16232","url":"https://github.com/sfewer-r7/CVE-2026-16232"},{"source":"poc-in-github","sourceId":"CVE-2026-16232","modified":"2026-10-25T12:13:51Z","url":"https://github.com/sfewer-r7/CVE-2026-16232"}],"tags":[]},{"url":"https://github.com/HackSpeak/CVE-2026-16232","source":"poc-in-github","sourceId":"CVE-2026-16232","description":"CVE-2026-16232 (Check Point SmartConsole authentication bypass) PoC - unauth to admin; for authorized security testing","modified":"2026-09-14T04:56:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-16232","url":"https://github.com/HackSpeak/CVE-2026-16232"},{"source":"poc-in-github","sourceId":"CVE-2026-16232","modified":"2026-09-14T04:56:11Z","url":"https://github.com/HackSpeak/CVE-2026-16232"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-16232 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-16232/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-16232.yaml","template":"javascript/cves/2026/CVE-2026-16232.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-16232%22&type=repositories","executable":false}]}