Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2026-123039)
- Level
- Minor (1/5)
- Command
- CYBERCOM
- Region
- Cyber
- Category
- Cyber threat
- Source
- CISA Known Exploited Vulnerabilities
Cyber ThreatMinor (1/5)Official statement68th Cyber threat alert in the last 30 days
At a glance
- What
- Cyber Threat
- Who
- CISA Known Exploited Vulnerabilities
- When
- Nov 13, 2026 at 12:00 AM UTC
- Pace
- 68th Cyber threat alert at severity 1+ in the last 30 days
Official Statements
CISA Known Exploited Vulnerabilities, November 13: “Check Point Firewall, Multi-Domain Security Management Server, Scalable Platforms, Security Gateway, and Security Management Server contain an incorrect permissions assignment for critical resources vulnerability when the Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.”
Source: CISA Known Exploited Vulnerabilities
