Occurred Nov 13, 2026, 12:00:00 AM UTC

First published Nov 14, 2026, 1:28:15 AM UTC · Last updated Nov 14, 2026, 1:28:15 AM UTC

CVE-2026-123039: Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability

Reported by CISA Known Exploited Vulnerabilities

The source describes a permissions flaw in several Check Point products that can let an authenticated local user run a command as root. It directs users to apply mitigations under vendor instructions and applicable CISA guidance.

Share this event

Follow: Events in United States

Manage follows

Why it matters

The source identifies a path to root-level command execution and recommends mitigation.

Generated scores

Scores are based on the cited reporting and use a 1–10 scale. Read the methodology.

Confidence: 5/10How certain the assessment is based on the clarity and evidence in the cited reporting.
Geographic reach: 2/10How widely the event reaches, from a local area (1) to worldwide impact (10).
Global importance: 3/10The event's broader significance, from limited importance (1) to major global importance (10).
Impact magnitude: 3/10The scale or severity of the real-world impact, from minor (1) to extreme (10).
Urgency: 5/10How time-sensitive the event is, from low urgency (1) to immediate attention needed (10).

Primary official sources

CISA Known Exploited Vulnerabilities CVE-2026-123039: Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability

Report an issue

Read our editorial process and corrections policy.

Continue exploring

Related developments reported in the last 30 days. These are not necessarily ongoing incidents.

Same topic
Tourism hackathon to seek solutions for industry challengesNov 13, 2026, 12:32 PM UTC
The Department of Tourism and the University of Cape Town will launch a tourism hackathon in Cape Town, where young innovators will develop technology-driven solutions for tourism-sector challenges.
Same topic
Two arrested for unlawfully issuing driver’s licenceNov 13, 2026, 10:10 AM UTC
Two suspects, including a traffic officer and a clerk, were arrested over alleged fraudulent issuance of a Traffic Register Number and driver’s licence using eNaTIS.
Same topic
CVE-2026-114713: UnrealIRCd Improper Neutralization of Delimiters VulnerabilityNov 13, 2026, 12:00 AM UTC
The source describes a vulnerability allowing a network user to inject server-to-server commands executed with server authority when two or more servers are linked. It calls for applying vendor mitigations or discontinuing use if mitigations are unavailable.
Same topic
President to lead delegation to Silicon ValleyNov 12, 2026, 4:38 PM UTC
South African President Cyril Ramaphosa is scheduled to lead a delegation to Silicon Valley, California, from 15 to 21 November 2026. The visit aims to strengthen South Africa’s AI capabilities and attract investment.
Same topic
Hundreds march in Gibraltar against Pelagos data center plan and demand transparencyNov 11, 2026, 10:46 AM UTC
A demonstration took place at Casemates Square in Gibraltar against ongoing construction projects and the proposed mega data center. Participants demanded transparency.
Same topic
In Ukraine, youth are finding their voices in the digital democracyNov 10, 2026, 7:49 PM UTC
We saw a gap: young people were consuming information and even participating online, but without media literacy, digital security awareness, or confidence that their voice could shape anything.

Loading related developments…

Explore events in united states