PT-2026-43236 · Unknown · Security Gateway

Published 2026-05-26 · Updated 2026-05-26 · CVE-2026-48132

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Security Gateway (affected versions not specified)

Description The Security Gateway fails to correctly validate a length value in specific IKE packets when NAT-T (NAT Traversal, a method allowing VPN traffic to pass through NAT devices) is used via port '4500/UDP'. A specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, resulting in a denial of service that temporarily interrupts VPN negotiations and traffic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-48132

Affected Products

Security Gateway

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-48132 · Security Note
• https://support.checkpoint.com/results/sk/sk184982 · Note
• https://twitter.com/ADKCyber/status/2059423821422075953 · Twitter Post