Incorrect Permission Assignment for Critical Resource Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 13 Nov 2026.
2.2%
Reading the vendor advisory
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-123039. Nothing runs until you send it.
Check Point Firewall, Multi-Domain Security Management Server, Scalable Platforms, Security Gateway, and Security Management Server contain an incorrect permissions assignment for critical resources vulnerability when the Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.
You are affected if
The fix