Check Point security advisory (AV26-1154)

Serial number: AV26-1154
Date: November 12, 2026

As of November 12, 2026, Check Point is affected by vulnerabilities in the following products:

• Check Point Force Firewalls
  • Multiple versions
• Check Point Management and Log Servers
  • Multiple versions
• Multi-Domain Security Management and Multi-Domain Log Server
  • Multiple versions
• Maestro Orchestrator
  • Multiple versions

Check Point indicates that CVE-2026-123039 is being exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• CVE-2026-107484 - Input Validation Vulnerability in Gaia Portal backend handlers allows privilege escalation by an authenticated user
• CVE-2026-123039 - Local privilege escalation to root in the DynamicCLI process via local world-writable control socket
• Check Point Security