CVE-2026-123039 exploited on Check Point products: prioritize remediation by November 16
CISA added CVE-2026-123039 to KEV after confirming active exploitation of a permissions flaw in multiple Check Point products running Gaia OS. An authenticated local user may run commands as root; assess exposure, conduct forensic triage and follow CISA guidance by the November 16, 2026 KEV…