IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.8Yüksek

CVE-2026-123039Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management Yayım: (1 saat önce)

Açıklama

The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.

Zayıflık türü (CWE): CWE-862CWE-732

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
checkpoint Quantum Security Gateway R82.10 with Jumbo Hotfix Take 50 or below, R82.20 with Jumbo Hotfix Take 10 or below, R82 with Jumbo Hotfix Take 130 or below, R81.20 with Jumbo Hotfix Take 173 or below
checkpoint Quantum Security Management R82.10 with Jumbo Hotfix Take 50 or below, R82.20 with Jumbo Hotfix Take 10 or below, R82 with Jumbo Hotfix Take 130 or below, R81.20 with Jumbo Hotfix Take 173 or below

Kaynaklar ve yamalar

Aynı üründe son açıklar — Check Point

9.8Kritik
CVE-2026-85103

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

4.3%EPSS