PT-2026-43235 · Check Point · Quantum Security Gateway

Published 2026-05-26 · Updated 2026-05-26 · CVE-2026-48131

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The VPN service may mishandle an unexpected IKE fragment value received on the IKE port '500/UDP' during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in a denial of service, which is a condition where users are unable to access a system or service, leading to a temporary disruption of VPN-related functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-48131

Affected Products

Quantum Security Gateway

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-48131 · Security Note
• https://twitter.com/ADKCyber/status/2059382394491113834 · Twitter Post
• https://support.checkpoint.com/results/sk/sk184981 · Note