The boxes that guard your network are the ones you patch last and attackers reach first.
CISA has added CVE-2026-123039, an incorrect permission assignment for critical resources, to its catalog of vulnerabilities exploited in the wild. It affects Check Point Firewall, Security Gateway, Scalable Platforms, Security Management Server and Multi-Domain Security Management Server. The Hacker News reports new N-central exploits that land on patched on-premise servers: root RCE and Windows SYSTEM access. The same outlet reports Citrix has patched 12 NetScaler and Secure Access Client flaws, one of them an authentication bypass.
So treat this as a week for inventory: every gateway and management console you own, patch whatever has a fix, and confirm a backup actually restores offline instead of assuming it does. I review payment and account flows for what an exposed edge can reach once it is trusted, and a focused review takes days, not months. Message me with what of yours is internet-facing and you get scope and timeline within a day.