KEV entry for CVE-2026-123039 shows status updated 2026-11-13, due date 2026-11-16; Check Point issues emergency hotfixes and reports exploitation since late October
KEV entry status updated 2026-11-13, due date 2026-11-16; Check Point emergency hotfixes and reports of exploitation since late October.
- Urgency
- L4
- 64
- 80
- 30
- 40
- 85
At a glance
On 2026-11-13 the KEV catalog entry for CVE-2026-123039 shows a status update and a due date of 2026-11-16. Check Point published emergency hotfixes and reported that attackers have been exploiting the flaw since late October. Organizations using affected Check Point Gaia or Mobile Access appliances should prioritize applying vendor mitigations or hotfixes.
- KEV entry status updated 2026-11-13, due date 2026-11-16; Check Point emergency hotfixes and reports of exploitation since late October.
CHRONOS Wire · November 14 · Alert 7
What happened
On 2026-11-13 the Known Exploited Vulnerabilities catalog entry for CVE-2026-123039 showed a status update and a due date of 2026-11-16. Check Point released emergency hotfixes and reported active exploitation since late October.
Why it matters
The KEV entry shows a near-term due date of 2026-11-16 and vendor reporting indicates the vulnerability is being actively exploited, creating a narrow window to apply mitigations or hotfixes.
CHRONOS Bottom Line
KEV metadata for CVE-2026-123039 was updated on 2026-11-13 with a listed due date of 2026-11-16, and Check Point says the issue has been exploited in the wild since late October; organizations running affected Check Point appliances should prioritize assessing and applying vendor mitigations or hotfixes.
Full detail
What changed
The KEV catalog entry for CVE-2026-123039 shows a status update at 2026-11-13 and lists a due date of 2026-11-16. Separately, Check Point published emergency hotfixes and reported attackers exploiting the flaw since late October.
What is genuinely new
The KEV entry for CVE-2026-123039 had a status update on 2026-11-13 and shows a due date of 2026-11-16, while vendor advisories and reporting indicate emergency hotfixes were released and exploitation has been observed since late October.
Detailed analysis
The CIRCL mirror of the KEV shows the catalog entry for CVE-2026-123039 with a status update timestamp of 2026-11-13 and a listed due date of 2026-11-16. Independent reporting from BleepingComputer cites Check Point emergency hotfixes and states attackers have been exploiting the flaw since late October. The available excerpts do not explicitly state that a particular agency added the entry on 2026-11-13, nor do they assert a specific regulatory or contractual remediation requirement tied to the due date.
U.S. Impact
U.S. Impact assessment pending.