← Back to the boardNews
Check Point warns of zero-day flaw exploited for root access
Why it’s here: Specialist cybersecurity reporting on an actively exploited zero-day in widely deployed federal-facing firewall and gateway products, with a multi-stage attack chain including destructive wiper malware, bearing directly on CISA KEV and critical-infrastructure security policy.
Trace across the boardItem
2d agoBleepingComputerCheck Point warns of zero-day flaw exploited for root accessCheck Point issued emergency hotfixes for CVE-2026-123039, a zero-day local privilege escalation flaw in its Gaia OS DynamicCLI daemon that attackers exploited to reach root on devices, with the chain also leading to a VMware ESXi wiper deployment.1 outletCyber4 linked
Connected
4 links- NewsThe firewall becomes the foothold: Attackers turn Check Point gateways against customersBoth involve Check Point Software, CISA, Gaia OS DynamicCLI (dynamic_server) daemon
- NewsCheck Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperBoth involve Check Point Software, CISA
- NewsCheck Point Software Achieves FedRAMP Certification for Check Point WAF, Empowering U.S. Federal Agencies with Prevention-First Application and API SecurityBoth involve Check Point Software
- NewsPHP2Shell Exploited in Destructive Check Point Gateway AttacksBoth involve Check Point Software, Ivanti
About
- Check Point Software
- CISA
- Ivanti