Skip to content
OpenAdvisories
High WID-SEC-2026-1726 4 CVEs

Check Point Security Gateway: Mehrere Schwachstellen

Published May 28, 2026 · Updated May 28, 2026 · de-DE

Vendor: Check Point Product: Security Gateway

Summary

Ein Angreifer kann mehrere Schwachstellen in Check Point Security Gateway ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um einen SQL-Injection Angriff durchzufhren.

Product

Check Point Security Gateway ist eine "Next Generation Firewall" Produktfamilie.

Vulnerabilities 4

  • High 8.1
    CVE-2026-48131

    VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero

    The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in denial of service (temporary disruption of VPN-r…

    Check Point Quantum Security Gateway Network devices
  • High 8.1
    CVE-2026-48132

    VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP

    The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP). As a result, a specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, leading to denial of ser…

    Check Point Quantum Security Gateway Network devices
  • High 7.5
    CVE-2026-48133

    Identity Awareness Captive Portal - Unauthenticated Local File Inclusion

    When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway.

    Check Point Quantum Security Gateway Network devices
  • Medium 5.6
    CVE-2026-48134

    SQL injection issue in UserCheck Portal when DLP Software Blade is active

    When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to manipulate the Security Gateway's stored DLP/UserCheck inci…

    Check Point Quantum Security Gateway Network devices

Revision history

  1. #1

    Initiale Fassung

References