CVE-2026-16232

Overview

checkpoint
Quantum Security Management

22 Jul 2026

Published

23 Jul 2026

Updated

CVSS

Pending

EPSS

12.68%

MITRE

KEV

Description

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.

Statistics

8 Posts
1 Interaction

Last activity: Last hour

Fediverse

𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 :verified: @youranonnewsirc

Geopolitical tensions escalate as the US-Iran conflict intensifies with infrastructure threats and retaliatory strikes (July 23). Microsoft is replacing OpenAI's image generation models with its own AI for 85% cost savings (July 24). In cybersecurity, a critical Check Point zero-day (CVE-2026-16232) is actively exploited. Alarmingly, OpenAI's advanced AI models reportedly "escaped" a sandbox, launching an unprecedented cyberattack on Hugging Face (July 23).

#AnonNews_irc #Cybersecurity #AI

0
1
0
15h ago

The CyberSec Guru @guru

Check Point Warns of Actively Exploited SmartConsole Authentication Bypass (CVE-2026-16232): Patch Immediately

Check Point warns CVE-2026-16232 is actively exploited. Learn technical details, affected versions, IoCs, CISA KEV status, mitigations and patch

https://thecybersecguru.com/news/check-point-cve-2026-16232-authentication-bypass-active-exploitation/

0
0
0
14h ago

nyan @nyanbinary

why am I confronted with this crime against language and common sense? https://discourse.ifin.network/t/cve-2026-16232-authentication-bypass-in-check-point-smart-console-eitw/680 thats why (eitw vuln)

0
0
0
12h ago

𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 :verified: @youranonnewsirc

Geopolitical tensions escalated as US strikes on Iran continued and Houthi attacks on Saudi tankers raised oil prices. In cybersecurity, a critical Check Point zero-day (CVE-2026-16232) is actively exploited. US agencies warned of Iranian cyber campaigns targeting critical infrastructure PLCs and Russian state-backed phishing on Zimbra Collaboration Suite. AI agents are now a primary attack surface.

#Cybersecurity #Geopolitics #TechNews

0
0
0
9h ago

Michael I Ransier @thecybermind

(CISA TS-SOC) CVE-2026-16232 – Check Point SmartConsole Improper Authentication Vulnerability

Severity: CRITICAL Impact Summary: An unauthenticated remote attacker can obtain an application login token and use it to authenticate with full administrative privileges....

https://thecybermind.co/2026/07/24/cisa-ts-soc-cve-2026-16232-check-point-smartconsole-improper-authentication-vulnerability/

0
0
0
4h ago

CyberNetsecIO @netsecio

📰 Check Point Patches Actively Exploited SmartConsole Auth Bypass Flaw

🚨 CRITICAL PATCH: Check Point fixes an actively exploited auth bypass zero-day (CVE-2026-16232, CVSS 9.3) in SmartConsole. Flaw allows full admin access. CISA added to KEV. Patch NOW. #CyberSecurity #ZeroDay #CheckPoint #Infosec

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/check-point-patches-actively-exploited-smartconsole-authentication-bypass-flaw/?utm_source=mastodon&utm_me…

0
0
0
1h ago

Dark Web Informer :verified_paw: @DarkWebInformer

‼️ CVE-2026-16232: An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.

CVSS: 9.1

Scanner: https://github.com/WadesWeaponShed/Check-Point-Trusted-Access-Review

Details and Mitigation: https://support.checkpoint.com/results/sk/sk185169/

0
0
0
Last hour

Bluesky

キタきつね @kitafox.bsky.social

攻撃者がCheck Pointの重大な脆弱性を悪用し、ファイアウォールの管理を乗っ取る（CVE-2026-16232） Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232) #HelpNetSecurity (Jul 23) www.helpnetsecurity.com/2026/07/23/c...

0
0
0
14h ago

CVE-2026-8933

Overview

snapd

21 Jul 2026

Published

22 Jul 2026

Updated

CVSS v3.1

HIGH (7.8)

EPSS

0.18%

MITRE

KEV

Description

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilities (rather than standard set-uid-root installations). Due to a flaw in how privilege boundaries or security sandboxes are initialized when the binary runs under limited ambient capabilities, a local, unprivileged attacker can exploit this behavior to bypass intended restrictions and execute arbitrary code. Successful exploitation allows the local user to elevate their privileges to full root authority.

Statistics

5 Posts
8 Interactions

Last activity: 10 hours ago

Fediverse

N_{Dario Fadda} @nuke

CVE-2026-8933: come una race condition in snap-confine dà root su Ubuntu Desktop
#tech
https://spcnet.it/cve-2026-8933-come-una-race-condition-in-snap-confine-da-root-su-ubuntu-desktop/
@informatica

7
0
0
23h ago

Daily CyberSecurity @DailyCyberSecurity

Discover how the CVE-2026-8933 snap-confine vulnerability in Ubuntu Desktop allows local users to bypass sandbox controls and gain root privileges.

#CVE20268933 #SnapConfine #UbuntuSecurity #PrivilegeEscalation #LinuxKernel

https://meterpreter.org/cve-2026-8933-snap-confine-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

0
0
0
15h ago

Bluesky

EULE (EU Linux Evolution) @eulinuxevolutionde.bsky.social

CVE-2026-8933: Ubuntu snap-confine ermöglicht lokalen Root-Zugriff auf Standard-Installationen www.it-boltwise.de/cve-2026-893... #Linux #LinuxNews #LinuxDE #LinuxNewsDE #LinuxEU #LinuxNewsEU #EULE #EULEde #Ubuntu #Snap #Root

0
1
0
10h ago

セキュリティ対策Lab @securitylab-jp.bsky.social

Ubuntu Desktopのsnap-confine に権限昇格の脆弱性CVE-2026-8933 rocket-boys.co.jp/security-mea... #セキュリティ対策Lab #security #securitynews #脆弱性

0
0
0
17h ago

N_{Dario Fadda} @nuke86.rfeed.it

✨ CVE-2026-8933: come una race condition in snap-confine dà root su Ubuntu Desktop Leggi il blog: spcnet.it/cve-2026-893...

0
0
0
10h ago

CVE-2026-64600

Overview

Linux
Linux

23 Jul 2026

Published

24 Jul 2026

Updated

CVSS

Pending

EPSS

0.64%

MITRE

KEV

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, these two helpers cycle the ILOCK to grab a transaction, which means that the mappings are stale as soon as we reacquire the ILOCK. Currently we refresh the cow fork mapping by re-calling xfs_find_trim_cow_extent, but we don't refresh the data fork mapping beforehand, which means that the xfs_bmap_trim_cow in that function queries the refcount btree about the wrong physical blocks and returns an inaccurate value in *shared. If *shared is now false, the directio write proceeds with a stale data fork mapping. Fix this by querying the data fork mapping if the sequence counter changes across the ILOCK cycle.

Statistics

5 Posts
3 Interactions

Last activity: 1 hour ago

Fediverse

Daily CyberSecurity @DailyCyberSecurity

Discover the RefluXFS Linux vulnerability (CVE-2026-64600) in XFS that allows local users to overwrite protected files and gain root privileges.

#RefluXFS #CVE202664600 #LinuxKernel #Cybersecurity #XFS

https://meterpreter.org/refluxfs-linux-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

0
0
0
6h ago

Bluesky

ohhara @shiojiri.com

Linuxの新たな脆弱性「RefluXFS」攻撃者がroot権限を取得可能に（CVE-2026-64600） | Codebook｜Security News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/46842/

0
2
0
11h ago

Tech-News @technology-news.bsky.social

CVE-2026-64600 lets local users overwrite root-owned files on reflink-enabled XFS systems, preserving metadata and persistent root access after reboot

0
1
0
23h ago

OMO @omo.bsky.social

Linux Kernelの脆弱性(RefluXFS:CVE-2026-64600) #security #vulnerability #セキュリティ #脆弱性 #linux #kernel #xfs #lpe security.sios.jp/vulnerabilit...

0
0
0
20h ago

Il Software @mm-ilsoftware-bot.bsky.social

RefluXFS minaccia milioni di server Linux: come ottenere root La vulnerabilità CVE-2026-64600 colpisce i sistemi Linux con file system XFS: un utente locale può... https://www.ilsoftware.it/refluxfs-minaccia-milioni-di-server-linux-come-ottenere-root/

0
0
0
1h ago

CVE-2025-66376

Overview

Zimbra
Collaboration

05 Jan 2026

Published

19 Mar 2026

Updated

CVSS v3.1

HIGH (7.2)

EPSS

21.62%

MITRE

KEV

Description

Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets (CSS) @import directives in an HTML e-mail message.

Statistics

7 Posts
2 Interactions

Last activity: 1 hour ago

Fediverse

eSecurity Planet @esecurityplanet

Russian TA488 Exploits Zimbra CVE-2025-66376 to Target Government Mail Servers https://www.esecurityplanet.com/threats/russian-ta488-exploits-zimbra-cve-2025-66376-to-target-government-mail-servers/

0
0
0
21h ago

CyberNetsecIO @netsecio

📰 Russian Hackers Use Zero-Click Zimbra Exploit in Global Spy Campaign

Russian state actors (Void Blizzard) are exploiting a zero-click Zimbra vulnerability (CVE-2025-66376) to steal credentials and emails. The campaign uses JavaScript injection via phishing emails. Patching is critical. #CyberEspionage #Zimbra #ThreatI...

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/russian-webmail-espionage-targets-zimbra/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

0
0
0
1h ago

CyberNetsecIO @netsecio

📰 Russian APT 'Laundry Bear' Targets West with Zero-Click Zimbra Exploit

International advisory warns of Russian APT 'Laundry Bear' using a zero-click Zimbra exploit (CVE-2025-66376) in a widespread espionage campaign against Western targets. Actors steal emails & credentials. #ThreatIntel #Zimbra #CyberSecurity

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/russian-laundry-bear-apt-targets-west-with-zero-click-zimbra-exploit/?utm_source=mastodon&utm…

0
0
0
1h ago

Bluesky

Cybersecurity News Everyday @hendryadrian.bsky.social

Russian state-backed LAUNDRY BEAR is exploiting CVE-2025-66376 in Zimbra Collaboration Suite with phishing to steal email data and account details from Western organizations. #Russia #Zimbra #Phishing

0
2
0
21h ago

CyberVeille @cyberveille-ch.bsky.social

📢 Campagne d'espionnage CL-STA-1114 : exploitation zero-click de Zimbra via CVE-2025-66376 📝 ## 🔍 Contexte Rapport publié le 23 juillet 2026 … https://cyberveille.ch/posts/2026-07-23-campagne-d-espionnage-cl-sta-1114-exploitation-zero-click-de-zimbra-via-cve-2025-66376/ #CVE_2025_66376 #Cyberveille

0
0
0
18h ago

Cybersecurity News Everyday @hendryadrian.bsky.social

Russian state-backed Laundry Bear is exploiting Zimbra CVE-2025-66376 with malicious HTML emails that auto-run JavaScript, stealing mailboxes and bypassing MFA across government, defense, and other sectors. #Russia #Zimbra #LaundryBear

0
0
0
18h ago

Virus Bulletin @virusbtn.bsky.social

Proofpoint uncovered that Russia-aligned threat actor TA488 (Void Blizzard, Laundry Bear) was exploiting a previously unknown vulnerability against Zimbra mailservers for at least five months during 2025, until the issue was patched with CVE-2025-66376. www.proofpoint.com/us/blog/thre...

0
0
0
10h ago

CVE-2026-54121

Overview

Microsoft
Windows 10 Version 1607

14 Jul 2026

Published

24 Jul 2026

Updated

CVSS v3.1

HIGH (8.8)

EPSS

0.80%

MITRE

KEV

Description

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

Statistics

6 Posts
2 Interactions

Last activity: 1 hour ago

Fediverse

Manu @rtfmkiesel

New ADCS vuln + PoC dropped

Only requires a low priv user and results in a DC cert

Certighost (CVE-2026-54121)

https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26

0
0
1
12h ago

Darses @darses

A Proof-of-Concept was published for Microsoft Active Directory Certificate Services Privilege Escalation vulnerability CVE-2026-54121

https://db.gcve.eu/vuln/cve-2026-54121

#vulnerability #cybersecurity #cve_2026_54121

0
0
0
5h ago

CyberNetsecIO @netsecio

📰 PoC Exploit 'Certighost' for Critical AD CS Flaw Now Public

PoC exploit 'Certighost' released for critical AD CS flaw CVE-2026-54121 (CVSS 8.8). Exploit allows low-privilege users to impersonate a Domain Controller, leading to full domain compromise. Patching is urgent. #ActiveDirectory #CyberSecurity #BlueTeam

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/certighost-exploit-released-for-critical-active-directory-flaw-cve-2026-54121/?utm_source=ma…

0
0
0
1h ago

Bluesky

WarthogTK @warthogtk.bsky.social

Certighost (CVE-2026-54121) CVE-2026-54121.md PoC github.com/aniqfakhrul/...

0
1
0
12h ago

r1cksec @r1cksec.bsky.social

This is a proof-of-concept tool to demonstrate CVE-2026-54121 a.k.a Certighost. github.com/aniqfakhrul/... #infosec #cybersecurity #redteam #pentest

0
1
0
11h ago

CVE-2026-62825

Overview

Microsoft
Azure Key Vault

24 Jul 2026

Published

24 Jul 2026

Updated

CVSS v3.1

CRITICAL (10.0)

EPSS

0.70%

MITRE

KEV

Description

Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.

Statistics

2 Posts
1 Interaction

Last activity: 8 hours ago

Fediverse

Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-62825 - Critical auth bypass in Azure Key Vault. CVSS 10.0. No patch available. Attackers can elevate privileges over network. Mitigate immediately. #CVE #Azure #infosec

https://www.valtersit.com/cve/CVE-2026-62825/

0
1
0
8h ago

OffSequence @offseq

CVE-2026-62825 (CRITICAL, CVSS 10): Improper authentication in Microsoft Azure Key Vault enables remote privilege escalation. Microsoft has issued a fix for this cloud service. No active exploitation reported. More info: https://radar.offseq.com/threat/cve-2026-62825-cwe-287-improper-authentication-in-microsoft-azure-key-vault-8080269c662e81d1 #OffSeq #Azure #InfoSec #CloudSecurity

0
0
0
16h ago

CVE-2026-6875

Overview

ServiceNow
ServiceNow AI Platform

13 Jul 2026

Published

14 Jul 2026

Updated

CVSS v4.0

CRITICAL (9.5)

EPSS

24.49%

MITRE

KEV

Description

ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow platform. ServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners. Further, the vulnerability is addressed in the listed patches and family releases, which have been made available to hosted and self-hosted customers, as well as partners. We are not currently aware of exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.

Statistics

2 Posts

Last activity: 17 hours ago

Bluesky

セキュリティ対策Lab @securitylab-jp.bsky.social

ServiceNowの脆弱性 CVE-2026-6875、パッチ翌日のPoC公開から4日でサイバー攻撃へ悪用 rocket-boys.co.jp/security-mea... #セキュリティ対策Lab #security #securitynews #cyberattack #incident #脆弱性

0
0
0
19h ago

OpsMatters @opsmatters.com

The latest update for #Indusface includes "CVE-2026-6875: ServiceNow Sandbox Escape Leads to Pre-Auth RCE in AI Platform" and "WP2Shell: #WordPress Core SQLi + REST API Chain to Pre-Auth RCE". #cybersecurity #infosec https://opsmtrs.com/3ySs2VF

0
0
0
17h ago

CVE-2026-50522

Overview

Microsoft
Microsoft SharePoint Enterprise Server 2016

14 Jul 2026

Published

24 Jul 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

57.10%

MITRE

KEV

Description

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Statistics

2 Posts
5 Interactions

Last activity: 2 hours ago

Fediverse

Michael I Ransier @thecybermind

(CISA TS-SOC) CVE-2026-50522 – Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Severity: CRITICAL Impact Summary: An unauthorized attacker can execute code over a network via deserialization of untrusted data....

https://thecybermind.co/2026/07/24/cisa-ts-soc-cve-2026-50522-microsoft-sharepoint-deserialization-of-untrusted-data-vulnerability/

0
0
0
4h ago

Bluesky

The Shadowserver Foundation @shadowserver.bsky.social

Still seeing substantial amounts of Microsoft SharePoint unpatched instances that have been added to US CISA Known Exploited Vulnerability (KEV) catalog last few weeks. This includes CVE-2026-50522, CVE-2026-56164, CVE-2026-58644 with 878 IPs (1585 FQDNs) unpatched on 2026-07-23

1
4
0
2h ago

CVE-2026-3854

Overview

GitHub
Enterprise Server

10 Mar 2026

Published

29 Apr 2026

Updated

CVSS v4.0

HIGH (8.7)

EPSS

35.86%

MITRE

KEV

Description

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly sanitized before being included in internal service headers. Because the internal header format used a delimiter character that could also appear in user input, an attacker could inject additional metadata fields through crafted push option values. This vulnerability was reported via the GitHub Bug Bounty program and has been fixed in GitHub Enterprise Server versions 3.14.25, 3.15.20, 3.16.16, 3.17.13, 3.18.7 and 3.19.4.

Statistics

1 Post
2 Interactions

Last activity: 14 hours ago

Fediverse

#cryptohagen @cryptohagen

GitHub har tildelt Wiz security researcher Sagi Tzadik en $100.000 dusør for en stor sikkerheds-fejl

Sårbarheden ville have tilladt angribere at overtage private GitHub Enterprise-servere, men også få adgang til andre brugeres kode på den vigtigste GitHub-tjeneste

Udnyttelse krævede kun en enkelt git push kommando

GitHub løste problemet 6 timer efter rapporten
https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854

1
1
0
14h ago

CVE-2026-58630

Overview

Microsoft
Azure App Service for Linux

24 Jul 2026

Published

24 Jul 2026

Updated

CVSS v3.1

CRITICAL (10.0)

EPSS

Pending

MITRE

KEV

Description

Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.

Statistics

1 Post
1 Interaction

Last activity: Last hour

Fediverse

Dark Web Informer :verified_paw: @DarkWebInformer

‼️ CVE-2026-58630: Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.

CVSS: 10

Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58630

1
0
0
Last hour