Check Point says a firewall privilege-escalation flaw is exploited
Original title: Check Point security advisory (AV26-1154)
Canada’s Cyber Centre urges admins to apply updates for CVE-2026-123039 and a separate Gaia Portal flaw.
On November 12, 2026, the Canadian Centre for Cyber Security said several Check Point products are affected by vulnerabilities and that Check Point reports CVE-2026-123039 is being exploited in the wild. That flaw allows local privilege escalation to root through a world-writable control socket in the DynamicCLI process. A second issue, CVE-2026-107484, lets an authenticated user escalate privileges via Gaia Portal backend handlers. The bulletin lists multiple versions and tells administrators to apply updates as they become available.
Unconfirmed: The bulletin does not state exact affected versions or whether fixes are already available.
- CVE-2026-123039 escalates locally to root via a world-writable DynamicCLI socket.
- CVE-2026-107484 is an input-validation flaw in Gaia Portal backend handlers.
- Affected lines include Force Firewalls, management and log servers, and Maestro Orchestrator.
- The bulletin lists affected products only as multiple versions.
Impact: local privilege escalation to root
| Product | Affected |
|---|---|
| Check Point Force Firewalls | Multiple versions |
| Check Point Management and Log Servers | Multiple versions |
| Check Point Multi-Domain Security Management and Multi-Domain Log Server | Multiple versions |
| Check Point Maestro Orchestrator | Multiple versions |
- 1.Review Check Point’s advisory and apply updates when they become available.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-123039+1 related CVE | Local root command execution via Gaia OS DynamicCLI socket | 7.8 group max | — |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1154 Date: November 12, 2026 As of November 12, 2026, Check Point is affected by vulnerabilities in the following products: Check Point Force Firewalls Multiple versions Check Point Management and Log Servers Multiple versions Multi-Domain Security Management and Multi-Domain Log Server Multiple versions Maestro Orchestrator Multiple versions Check Point indicates that CVE-2026-123039 is being…
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.