CVE-2026-48132

HighCVSS 8.1/10Last modified Jul 24, 2026

Description

The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP). As a result, a specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, leading to denial of service (temporary interruption of VPN negotiations/traffic).

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
checkpoint	Quantum Security Gateway	R82.10 with Jumbo Hotfix Take 6 or below; R82 with Jumbo Hotfix Take 91 or below; R81.20 with Jumbo Hotfix Take 127 or below; All releases from R81.10 and below

References

https://support.checkpoint.com/results/sk/sk184982

Timeline

Published: May 26, 2026
Last modified: Jul 24, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-481337.5When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal CVE-2026-481345.6When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an atta CVE-2026-481355.3A Check Point HTTP-based service can incorrectly handle malformed HTTP requests. The issue is related to HTTP request parsing and validation CVE-2026-481364.1When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management D CVE-2026-481379.8There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an CVE-2026-481387.5There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial o CVE-2026-481397.5There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial CVE-2026-481406.5There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum state CVE-2026-481417.5There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion. This affects NI CVE-2026-481424.8NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a loc CVE-2026-481449.1Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: bef CVE-2026-481457.5Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before