CVE-2026-123039 Checkpoint Quantum Security Gateway
The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.
- CVSS
- 7.8 High
- Published
- 2026-11-12
- Force
- 5 of 12
- Public PoC
- 1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H