ET EXPLOIT Check Point CPMI Protocol Authentication Bypass via Application Login (CVE-2026-16232)

7.0.35.0SID: 2071347Rev: 3Enabled20 views
History
Sourceet/open
Fileemerging-exploit.rules
CreatedJuly 29, 2026
UpdatedJuly 30, 2026
Classificationattempted-admin
alert tcp any any -> [$HOME_NET,$HTTP_SERVERS] 18190 (msg:"ET EXPLOIT Check Point CPMI Protocol Authentication Bypass via Application Login (CVE-2026-16232)"; reference:url,www.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232/; reference:cve,2026-16232; classtype:attempted-admin; sid:2071347; rev:3; metadata:attack_target Server, tls_state TLSDecrypt, created_at 2026_07_29, cve CVE_2026_16232, deployment Perimeter, deployment Internal, deployment SSLDecrypt, former_category WEB_SERVER, confidence Medium, signature_severity Major, tag Exploit, updated_at 2026_07_30, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique_name Exploit_Public_Facing_Application;)
Detection details are hidden.

References

urlwww.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232/
cve2026-16232

Metadata

attack targetServer
tls stateTLSDecrypt
created at2026_07_29
deploymentSSLDecrypt
former categoryWEB_SERVER
confidenceMedium
signature severityMajor
tagExploit
updated at2026_07_30
mitre tactic idTA0001
mitre tactic nameInitial_Access
mitre technique idT1190
mitre technique nameExploit_Public_Facing_Application

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!