CVE-2026-123039
HIGH 1 PoC
MEDIUM
Priority: 0.10
BB Relevance:
51/100
Published: 2026-11-12
Modified: 2026-11-13
First seen: 2026-11-12
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.
Affected Software (16)
| Vendor | Product | Version |
|---|---|---|
| checkpoint | Quantum Security Gateway | R82.10 with Jumbo Hotfix Take 50 or below |
| checkpoint | Quantum Security Gateway | R82.20 with Jumbo Hotfix Take 10 or below |
| checkpoint | Quantum Security Gateway | R82 with Jumbo Hotfix Take 130 or below |
| checkpoint | Quantum Security Gateway | R81.20 with Jumbo Hotfix Take 173 or below |
| checkpoint | Quantum Security Gateway | R82.10 with Jumbo Hotfix Take 50 or below |
| checkpoint | Quantum Security Gateway | R82.20 with Jumbo Hotfix Take 10 or below |
| checkpoint | Quantum Security Gateway | R82 with Jumbo Hotfix Take 130 or below |
| checkpoint | Quantum Security Gateway | R81.20 with Jumbo Hotfix Take 173 or below |
| checkpoint | Quantum Security Management | R82.10 with Jumbo Hotfix Take 50 or below |
| checkpoint | Quantum Security Management | R82.20 with Jumbo Hotfix Take 10 or below |
| checkpoint | Quantum Security Management | R82 with Jumbo Hotfix Take 130 or below |
| checkpoint | Quantum Security Management | R81.20 with Jumbo Hotfix Take 173 or below |
| checkpoint | Quantum Security Management | R82.10 with Jumbo Hotfix Take 50 or below |
| checkpoint | Quantum Security Management | R82.20 with Jumbo Hotfix Take 10 or below |
| checkpoint | Quantum Security Management | R82 with Jumbo Hotfix Take 130 or below |
| checkpoint | Quantum Security Management | R81.20 with Jumbo Hotfix Take 173 or below |