8.1
CVE-2026-48131
- EPSS 2.66%
- Veröffentlicht 26.05.2026 12:56:08
- Zuletzt bearbeitet 26.05.2026 19:09:11
- Quelle cve@checkpoint.com
- CVE-Watchlists
- Unerledigt
VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero
The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in denial of service (temporary disruption of VPN-related functionality).
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Herstellercheckpoint
≫
Produkt
Quantum Security Gateway
Version
R82.10 with Jumbo Hotfix Take 6 or below
Status
affected
Version
R82 with Jumbo Hotfix Take 91 or below
Status
affected
Version
R81.20 with Jumbo Hotfix Take 127 or below
Status
affected
Version
All releases from R81.10 and below
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.66% | 0.837 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cve@checkpoint.com | 8.1 | 2.2 | 5.9 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-122 Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://support.checkpoint.com/results/sk/sk184981