Security
1 min read0 views
CVE-2026-123039: Check Point local privilege escalation to root in DynamicCLI daemon (Update: added to CISA KEV)
Update: added to CISA KEV. The DynamicCLI daemon in checkpoint's Quantum Security Gateway and Quantum Security Management (Gaia OS) runs as root and listens on a world-writable local socket without checking which processes connect. A local user who has an authenticated account can send a command through that socket and have it executed as root.
Reading Level🟢Beginner
Listen to this article
Update: added to CISA KEV. The DynamicCLI daemon in checkpoint's Quantum Security Gateway and Quantum Security Management (Gaia OS) runs as root and listens on a world-writable local socket without checking which processes connect. A local user who has an authenticated account can send a command through that socket and have it executed as root.
Original Source
cve.now CISA KEVLike this article
Share this article
Share:
Related Articles
CVE-2026-114713: UnrealIRCd remote command injection in labeled-response module (Update: added to CISA KEV)
1 min read·2h ago
CVE-2026-21509: Microsoft local security feature bypass in trust checks (Update: proof of concept on GitHub published)
1 min read·6h ago
CVE-2025-22224: VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. (Update: proof of concept on GitHub published)
1 min read·1d ago