https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T19:24:27.575102+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123039 CVE-2026-123039 — Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket 2026-11-13T19:24:27.576976+00:00

Affected: checkpoint Quantum Security Gateway, checkpoint Quantum Security Management

The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.