Known Exploited Vulnerabilities November 13, 2026 · CISA KEV Catalog

CVE-2026-123039: Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability

Check Point Firewall, Multi-Domain Security Management Server, Scalable Platforms, Security Gateway, and Security Management Server contain an incorrect permissions assignment for critical resources vulnerability when the Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-123039 Check Point
Related: CISA Adds Two Known Exploited Vulnerabilities to Catalog Cyber Risks · Nov 13, 2026
CVE-2026-85102: Check Point Multiple Products Improper Certificate Validation Vulnerability Known Exploited Vulnerabilities · Sep 22, 2026
CVE-2026-93616: Check Point Multiple Products Path Traversal Vulnerability Known Exploited Vulnerabilities · Sep 22, 2026