DeutschShown in its original language — a full translation is planned for a future version.
Check Point Security Gateway: Mehrere Schwachstellen
view advisory published 2026-05-28
Ein Angreifer kann mehrere Schwachstellen in Check Point Security Gateway ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um einen SQL-Injection Angriff durchzufhren.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-48134US | — | — | ||
When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask pa… | ||||
| CVE-2026-48133US | — | — | ||
When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway. | ||||
| CVE-2026-48132US | — | — | ||
The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP). As a result, a specially crafted or malformed packet can cause… | ||||
| CVE-2026-48131US | — | — | ||
The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to termin… | ||||
02
references
External citations — patches, advisories, analysis.
- Check Point Security Advisory CVE-2026-48131 vom 2026-05-28external
- Check Point Security Advisory CVE-2026-48132 vom 2026-05-28external
- Check Point Security Advisory CVE-2026-48134 vom 2026-05-28external
- Check Point Security Advisory CVE-2026-48133 vom 2026-05-28external
- WID-SEC-W-2026-1726 - CSAF Versionself
- WID-SEC-2026-1726 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan