CVE-2026-123039: Check Point security advisory (AV26-1154)

2 karet z 2 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-123039

Hodnocení závažnosti

7.8 CVSS 3.1 checkpoint

útok z místního přístupu bez přípravy stačí běžný účet bez zásahu uživatele

dopad plný únik dat úplná změna dat úplný výpadek

přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

cve.org · NVD

12. 11. 2026 20:08

Check Point security advisory (AV26-1154)

Serial number: AV26-1154 Date: November 12, 2026 As of November 12, 2026, Check Point is affected by vulnerabilities in the following products: Check Point Force Firewalls Multiple versions Check Point Management and Log Servers Multiple versions Multi-Domain Security Management and Multi-Domain Log Server Multiple versions Maestro Orchestrator Multiple versions Check Point indicates that CVE-2026-123039 is being exploited in the wild. The Cyber Centre encourages users and administrators to…

CVE-2026-107484 CVE-2026-123039 Check Point CA

tg: zneužíváno tg: zranitelnost

12. 11. 2026 20:08 · Cyber Centre Kanada · Check Point security advisory (AV26-1154)

12. 11. 2026 14:56

PHP2Shell Exploitation on Check Point Gateway

By Lotem Finkelstein, VP Research Key findings Beginning on 30 October 2026, an attacker executed scanning and exploitation activity against organizations with unpatched Check Point Security Gateways, using Mobile Access portals with PHP2Shell as initial access followed by CVE-2026-123039. The first wave, on October 30, targeted Israeli organizations and included destructive activity against some of them. A broader second wave on November 2 targeted organizations across multiple countries and…

KEV ✓ EPSS 1.00 CVE-2026-109618 CVE-2026-109619 CVE-2026-123039 Check Point VMware IL

tg: varování tg: zneužíváno tg: rozbor tp: malware tp: špionáž

12. 11. 2026 14:56 · Check Point Research · PHP2Shell Exploitation on Check Point Gateway