A vendor of cybersecurity solutions, Check Point Software Technologies, has issued emergency fixes for its SmartConsole management application for a “critical” zero-day vulnerability. The bug, dubbed CVE-2026-16232, is being weaponized by attackers who are trying to gain full access to enterprise security management systems.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the vulnerability to its ‘Known Exploited Vulnerabilities’ (KEV) list and mandated its patching in federal civilian agencies in its Binding Operational Directive (BOD) 26-04.
