CVE-2026-48131

The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in denial of service (temporary disruption of VPN-related functionality).

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.checkpoint.com/results/sk/sk184981

Configurations

No configuration.

History

24 Jul 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) El servicio VPN puede manejar incorrectamente un valor de fragmento IKE inesperado recibido en el puerto IKE 500/UDP durante la etapa inicial de un intento de conexión. Esto puede provocar que el servicio finalice inesperadamente, lo que resulta en denegación de servicio (interrupción temporal de la funcionalidad relacionada con la VPN).

26 May 2026, 14:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-26 14:16

Updated : 2026-07-24 11:10

NVD link : CVE-2026-48131

Mitre link : CVE-2026-48131

CVE.ORG link : CVE-2026-48131

JSON object : View

Products Affected

No product.

CWE

CWE-122

Heap-based Buffer Overflow

{"id": "CVE-2026-48131", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-48131", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-26T15:12:47.698813Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cve@checkpoint.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}]}, "affected": [{"source": "cve@checkpoint.com", "affectedData": [{"vendor": "checkpoint", "product": "Quantum Security Gateway", "versions": [{"status": "affected", "version": "R82.10 with Jumbo Hotfix Take 6 or below"}, {"status": "affected", "version": "R82 with Jumbo Hotfix Take 91 or below"}, {"status": "affected", "version": "R81.20 with Jumbo Hotfix Take 127 or below"}, {"status": "affected", "version": "All releases from R81.10 and below"}]}]}], "published": "2026-05-26T14:16:38.407", "references": [{"url": "https://support.checkpoint.com/results/sk/sk184981", "source": "cve@checkpoint.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cve@checkpoint.com", "description": [{"lang": "en", "value": "CWE-122"}]}], "descriptions": [{"lang": "en", "value": "The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in denial of service (temporary disruption of VPN-related functionality)."}, {"lang": "es", "value": "El servicio VPN puede manejar incorrectamente un valor de fragmento IKE inesperado recibido en el puerto IKE 500/UDP durante la etapa inicial de un intento de conexi\u00f3n. Esto puede provocar que el servicio finalice inesperadamente, lo que resulta en denegaci\u00f3n de servicio (interrupci\u00f3n temporal de la funcionalidad relacionada con la VPN)."}], "lastModified": "2026-07-24T11:10:00.170", "sourceIdentifier": "cve@checkpoint.com"}