IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.8Hoch

CVE-2026-123039Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management Veröffentlicht: (vor 2 Stunden)

Beschreibung

The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.

Schwachstellentyp (CWE): CWE-862CWE-732

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
checkpoint Quantum Security Gateway R82.10 with Jumbo Hotfix Take 50 or below, R82.20 with Jumbo Hotfix Take 10 or below, R82 with Jumbo Hotfix Take 130 or below, R81.20 with Jumbo Hotfix Take 173 or below
checkpoint Quantum Security Management R82.10 with Jumbo Hotfix Take 50 or below, R82.20 with Jumbo Hotfix Take 10 or below, R82 with Jumbo Hotfix Take 130 or below, R81.20 with Jumbo Hotfix Take 173 or below

Referenzen und Patches

Neue CVEs im selben Produkt — Check Point

9.8Kritisch
CVE-2026-85103

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

4.3%EPSS