PT-2026-43238 · Check Point · Check Point Gaia

CVE-2026-48134 · Published 2026-05-26 · Updated 2026-06-11

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Security Gateway (affected versions not specified)

Description An input-handling issue exists in the UserChoice flow of the UserCheck Web Portal when DLP is active. An attacker with access to the UserCheck Ask page can manipulate stored DLP/UserCheck incident information on the Security Gateway. This may result in the loss of stored incident entries, incorrect processing of pending approvals, or resource impact through repeated abuse. Risk is lower if the UserCheck Portal is inaccessible from untrusted networks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-48134

Affected Products

Check Point Gaia

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-48134 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48134 · Note
• https://support.checkpoint.com/results/sk/sk184983 · Note