CISA warns of actively exploited flaws in Check Point gear and UnrealIRCd servers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two newly disclosed vulnerabilities to its Known Exploited Vulnerabilities catalog, indicating both are being actively exploited in the wild. The first flaw, CVE-2026-114713, is a command injection bug in UnrealIRCd versions 6.0.0 to 6.2.7.1 that lets ordinary IRC users inject newlines into server-to-server communications to execute privileged commands. The second, CVE-2026-123039, is a local privilege escalation vulnerability in Check Point Security Gateways and Management products where the Gaia OS DynamicCLI daemon fails to authenticate connections to a world-writable socket, allowing low-privileged local users to run commands as root.

For engineers managing IRC networks or Check Point infrastructure, these are urgent patching priorities. The UnrealIRCd bug requires immediate updating to version 6.2.7.1, as attackers are already probing for it, while Check Point administrators must apply the vendor's latest hotfix to prevent local attackers from seizing root control. CISA's binding operational directive mandates federal agencies to patch these flaws within strict deadlines, setting a critical example for all organizations to follow suit before their systems are compromised.