HIGHCVSS v3.1 7.8Actively exploited · CISA KEV since 2026-11-13Vulnerability
CVE-2026-123039
The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.
Properties
- Vulnerability name
- Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability
- Epss score
- 0.01274
- Last seen
- 2026-11-13T20:58:23+00:00
- Due date
- 2026-11-16
- Exploited euvd since
- 2026-11-13T00:00:00+00:00
- Date added
- 2026-11-13
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-124481
- Score
- 7.8
- Euvd base score version
- 3.1
- Euvd vendor
- checkpoint
- First seen by Signal
- 2026-11-12T15:57:02+00:00
- Euvd base score
- 7.8
- Vendor project
- Check Point
- Content hash
- 117493427d3990322077bd5fd9b9317a1b8c7ddfa6478632af8eed1a1ed92a3a
- Published at
- 2026-11-12T14:17:24.233
- Euvd updated
- 2026-11-13T20:58:23+00:00
- Last modified
- 2026-11-13T20:18:14.257
- Euvd epss pct
- 0
- Epss percentile
- 0.70349
- Licence
- ENISA legal notice 1.2: reproduction authorised provided the source is acknowledged
Related Entities (4)
HAS_WEAKNESS (2)
INVOLVES (1)
MENTIONED_IN (1)
Related research
- What CISA KEV means · and how to use the list
- CVE, CVSS, EPSS and KEV explained
Explore deeper with Ninja Signal's threat intelligence graph