CISA Warns of Actively Exploited Check Point Zero-Day Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert regarding a zero-day vulnerability (CVE-2026-123039) in Check Point's Gaia OS, which is actively being exploited. This flaw allows local users to gain root access on affected appliances, including firewalls. Check Point has observed exploitation against customers and released updates to mitigate the risk, highlighting the urgent need for organizations to patch their systems to prevent unauthorized access.