CVE-2026-123039

Vendor

Checkpoint

Product

Quantum Security Gateway, Quantum Security Management

CVSS v3.1

7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

1.00 (p100)

Weakness

CWE-732, CWE-862

Exposure class

Edge / VPN / firewall, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 58
   Research Check Point Research 7h ago

   PHP2Shell Exploitation on Check Point Gateway

   Key findings Introduction We have now confirmed that, in late October 2026, approximately one week after a security fix became available, activity originating from 130.94.19[.]204 targeted Israeli organizations through vulnerable…

   EPSS 1.00 CVE-2026-109618CVE-2026-123039CVE-2026-109619 Check Point PHP
2. 37
   CCCS advisory CCCS 2h ago

   Check Point security advisory (AV26-1154)

   CVE-2026-123039CVE-2026-107484 Check Point
3. 37
   CVE NVD 7h ago

   The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting…

   The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it…

   CVSS 7.8 CVE-2026-123039 Checkpoint