Updated daily · official sources

Security Radar

Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).

35exploited in the last 30 days

12critical (CVSS ≥ 9)

0used in ransomware

1781in the KEV catalog

CVE-2026-123039 High · CVSS 7.8 added on 11/13/2026

Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability

Check Point · Multiple Products · CWE-732, CWE-862

Check Point Firewall, Multi-Domain Security Management Server, Scalable Platforms, Security Gateway, and Security Management Server contain an incorrect permissions assignment for critical resources vulnerability when the Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.

Want to know if your environment is exposed?

We assess versions, access and integrations of your ERP and infrastructure and prioritize the fixes.

Talk to a specialist

Sources: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database and FIRST EPSS. Informational content; always follow the vendor advisory and fix.

This product uses the NVD API but is not endorsed or certified by the NVD.