Skip to content
OpenAdvisories
High 1 exploited CVE WID-SEC-2026-4562 2 CVEs

Check Point Security Management und Security Gateway: Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten

Published Nov 12, 2026 · Updated Nov 12, 2026 · de

Vendor: Check Point Product: Security Gateway Product: Security Management

Summary

Ein Angreifer kann mehrere Schwachstellen in Check Point Security Management und Check Point Security Gateway ausnutzen, um Administratorrechte zu erlangen.

Product

Eine vereinheitlichte Plattform zur Verwaltung von Sicherheitsrichtlinien, Überwachung des Netzwerkverkehrs und Bereitstellung von Sicherheits-Gateways in der Infrastruktur einer Organisation.
Check Point Security Gateway ist eine "Next Generation Firewall" Produktfamilie.

Vulnerabilities 2

  • High 7.8
    CVE-2026-123039 Exploited Public exploit

    Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket

    The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.

    Check Point Quantum Security Gateway Quantum Security Management Network devices
    KEV Nov 13, 2026
  • High 7.3
    CVE-2026-107484

    Input Validation Vulnerability in Gaia Portal backend handlers allows privilege escalation by an authenticated user

    An input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticated, non-administrative user to perform privileged operations that should be restricted to administrators.

    Check Point Quantum Security Gateway Quantum Security Management Network devices

Revision history

  1. #1

    Initiale Fassung

References