Skip to content
OpenAdvisories
High · 7.5 CVE-2026-48133 EUVD-2026-31820GHSA-fc4q-p6gg-r9rr

Identity Awareness Captive Portal - Unauthenticated Local File Inclusion

Published May 26, 2026 · Updated Jun 2, 2026 · Assigned by checkpoint

Description

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway.

Affected products

VendorProductAffectedFixed
checkpoint Quantum Security Gateway R82.10 with Jumbo Hotfix Take 6 or below, R82 with Jumbo Hotfix Take 91 or below, R81.20 with Jumbo Hotfix Take 127 or below, All releases from R81.10 and below —

Advisories 1

References