[CVE-2026-16232]

July 29, 2026

• Rapid7 published a technical analysis of the Check Point SmartConsole authentication bypass (CVE-2026-16232), now under active exploitation (Rapid7) (earlier coverage). · Vulnerabilities & Exploits

in Artifactory Zero-Days Confirmed as the Hugging Face AI Agent's Escape Route

July 25, 2026

• Check Point SmartConsole (CVE-2026-16232) — scanner released. A public trusted-access-review scanner shipped for the actively-exploited authentication bypass (CVSS 9.x) that hands an unauthenticated remote attacker a full-admin login token (earlier coverage). Scanner. · Vulnerabilities & Exploits

in A Default-Config RCE Cracks GitLab, and the PoC Is Already Public

July 24, 2026

• Check Point SmartConsole authentication bypass CVE-2026-16232 (CVSS 9.3) is being exploited in the wild. Unauthenticated remote attackers can bypass the login process to gain full admin access on Security Management and Multi-Domain Management; hotfixes are out. Rapid7, BleepingComputer (discussion). · Vulnerabilities & Exploits

in The Week AI Agents Started Doing the Hacking