CVE-2026-48134
Last modified
CVE-2026-48134 is a medium-severity vulnerability rated 5.6/10 on the CVSS scale. When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to manipulate the Security Gateway's stored DLP/UserCheck incident information. EPSS estimates a 4.36% chance of exploitation in the next 30 days.
Description
When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to manipulate the Security Gateway's stored DLP/UserCheck incident information. This could lead to disruptions such as loss of stored incident entries, incorrect handling of pending approvals, or resource impact if the issue is abused repeatedly. Exposure is reduced if the UserCheck Portal is not accessible from untrusted networks.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| checkpoint | Quantum Security Gateway | R82.10 with Jumbo Hotfix Take 6 or below; R82 with Jumbo Hotfix Take 91 or below; R81.20 with Jumbo Hotfix Take 127 or below; All releases from R81.10 and below |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-48134?
How severe is CVE-2026-48134?
How do I fix CVE-2026-48134?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-48127Frappe is a full-stack web application framework. Prior to 1…5.3
- CVE-2026-48128Budibase is an open-source low-code platform. Prior to 3.39.…5.1
- CVE-2026-48129Kestra is an open-source, event-driven orchestration platfor…6.5
- CVE-2026-48131The VPN service may mishandle an unexpected IKE fragment val…8.1
- CVE-2026-48132The Security Gateway does not correctly validate a length va…8.1
- CVE-2026-48133When the Identity Awareness blade is enabled with Browser-Ba…7.5
- CVE-2026-48135A Check Point HTTP-based service can incorrectly handle malf…5.3
- CVE-2026-48136When Compliance is enabled on Check Point Multi-Domain Manag…4.1
- CVE-2026-48137There is an untrusted pointer dereference vulnerability in t…9.8
- CVE-2026-48138There is an out-of-bounds read vulnerability in the NI grpc-…8.7
- CVE-2026-48139There is a NULL pointer dereference vulnerability in NI grpc…8.7
- CVE-2026-48140There is an unchecked enum cast vulnerability in NI grpc-dev…7.1
Are you affected by CVE-2026-48134?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST