If you run Check Point gateways or management servers, one item on today's list should jump your queue.
CISA added an incorrect permission assignment flaw in Check Point products, CVE-2026-123039, to its catalog of vulnerabilities actively exploited in the wild. Two more come from The Hacker News. N-able is investigating a public disclosure claiming additional vulnerabilities in on-premise N-central 2026.4.1 HF2, and Citrix has patched 12 NetScaler and Secure Access Client flaws, including an authentication bypass. We would let evidence of exploitation, rather than a severity label, decide which maintenance window you spend first.
If you want a second pair of eyes afterwards, send us one payment or account flow and we come back with scope and timeline within a day.