Skip to content
VulniPulse
Sign inStart free
High7.8Check Point Exploited CISA KEV Updated

CVE-2026-123039: Check Point Multiple Products Incorrect Permission Assignment for Critical Resource

This Check Point advisory covers CVE-2026-123039 in Quantum Security Gateway and Quantum Security Management.

Open the Check Point advisory

Key facts

Vendor rating
High, CVSS 7.8
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · base score 7.8, scored by checkpointAttack vector: local. Attack complexity: low. Privileges required: low. User interaction: none. Scope: unchanged. Confidentiality impact: high. Integrity impact: high. Availability impact: high.
Weakness
  • CWE-862: Missing Authorization.
  • CWE-732: Incorrect Permission Assignment for Critical Resource.
EPSS
1.27% chance of exploitation in the next 30 days (70th percentile). FIRST EPSS, .
CISA SSVC
Exploitation: active. Automatable: no. Technical impact: total. CISA, .
CISA KEV
Listed ; federal due date
Affected
Quantum Security Gateway R82.10 with Jumbo Hotfix Take 50 or below; Quantum Security Gateway R82.20 with Jumbo Hotfix Take 10 or below; Quantum Security Gateway R82 with Jumbo Hotfix Take 130 or below and 5 more below
Source published
Source revised
Listed by VulniPulse
Record changed

Compiled by VulniPulse from the linked sources. How records are collected and checked.

Affected products & platforms

Check PointQuantum Gateway / GaiaSecurity Management

CVE-2026-123039 in the CISA Known Exploited Vulnerabilities catalog

CISA name:
Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability
CISA description:
Check Point Firewall, Multi-Domain Security Management Server, Scalable Platforms, Security Gateway, and Security Management Server contain an incorrect permissions assignment for critical resources vulnerability when the Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.
Required action:
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Description

The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.

Affected products named by the advisory: Quantum Security Gateway; Quantum Security Management.

Text from the source record.

Affected versions
  • Quantum Security Gateway R82.10 with Jumbo Hotfix Take 50 or below
  • Quantum Security Gateway R82.20 with Jumbo Hotfix Take 10 or below
  • Quantum Security Gateway R82 with Jumbo Hotfix Take 130 or below
  • Quantum Security Gateway R81.20 with Jumbo Hotfix Take 173 or below
  • Quantum Security Management R82.10 with Jumbo Hotfix Take 50 or below
  • Quantum Security Management R82.20 with Jumbo Hotfix Take 10 or below
  • Quantum Security Management R82 with Jumbo Hotfix Take 130 or below
  • Quantum Security Management R81.20 with Jumbo Hotfix Take 173 or below

Official advisory · high-confidence parse· fetched ·verify at source

End-of-life dates for Check Point Quantum Gateway / Gaia

More Check Point advisories

Check Point advisories, November 2026All Check Point advisories

Get an email when Check Point Quantum Gateway / Gaia publishes the next one.

See Check Point Quantum Gateway / Gaia's last 90 days first. Live alerts for one product are free for life; every vendor is US$15 a month after a free month.

Alert me about Check Point Quantum Gateway / Gaia