CVE-2026-1230397.8High
CVE-2026-123039: Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket
checkpoint · Quantum Security Gateway
No fix listed · Affected: checkpoint Quantum Security Gateway · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.10 (10 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
No EPSS score yet. The score appears once FIRST publishes it.
7.8HighCVSS
LowMediumHighCrit.
DescriptionNVD
The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 12 Nov.
- Check Point says attackers exploited Gateway flaw for root accessSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.