CVE-2026-48133— Identity Awareness Captive Portal - Unauthenticated Local File Inclusion
Possible ATT&CK Techniques 1AI
T1005 · Data from Local SystemAffected Version Matrix 4
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| checkpoint | Quantum Security Gateway | R82.10 with Jumbo Hotfix Take 6 or below | affected |
R82 with Jumbo Hotfix Take 91 or below | affected | ||
R81.20 with Jumbo Hotfix Take 127 or below | affected | ||
All releases from R81.10 and below | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-48133
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Identity Awareness Captive Portal - Unauthenticated Local File Inclusion
Source: NVD (National Vulnerability Database)
Vulnerability Description
When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Check Point Security Gateway 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Check Point Security Gateway是以色列Check Point公司的一系列网络安全网关设备。 Check Point Security Gateway存在安全漏洞，该漏洞源于启用基于浏览器身份验证的身份感知模块时，未经身份验证的用户可能读取内部文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| checkpoint | Quantum Security Gateway | R82.10 with Jumbo Hotfix Take 6 or below | - |
II. Public POCs for CVE-2026-48133
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-48133
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-48133 (1)
Same Patch Batch · checkpoint · 2026-05-26 · 6 CVEs total
| CVE-2026-48132 | 8.1 HIGH | VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP |
| CVE-2026-48131 | 8.1 HIGH | VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero |
| CVE-2026-48134 | 5.6 MEDIUM | SQL injection issue in UserCheck Portal when DLP Software Blade is active |
| CVE-2026-48135 | 5.3 MEDIUM | HTTP service can incorrectly process malformed HTTP requests |
| CVE-2026-48136 | 4.1 MEDIUM | Authenticated Administrator Role-Based Access Control Bypass in Compliance |
IV. Related Vulnerabilities
Same product: Quantum Security Gateway
- CVE-2026-50751
User Authentication Bypass in VPN Remote Access and Mobile A - CVE-2026-50752
Certificate Validation Bypass in VPN Site-to-Site Connection - CVE-2026-48135
HTTP service can incorrectly process malformed HTTP requests - CVE-2026-48134
SQL injection issue in UserCheck Portal when DLP Software Bl - CVE-2026-48132
VPN service may restart unexpectedly when processing IKE tra
Same vendor: checkpoint
- CVE-2026-10847
Local Privilege Escalation vulnerability in Check Point Iden - CVE-2026-50751
User Authentication Bypass in VPN Remote Access and Mobile A - CVE-2026-50752
Certificate Validation Bypass in VPN Site-to-Site Connection - CVE-2026-48136
Authenticated Administrator Role-Based Access Control Bypass - CVE-2026-48135
HTTP service can incorrectly process malformed HTTP requests
Same weakness: CWE-98
- CVE-2026-49954
Discuz! X5.0 Local File Inclusion via enable_disable.php Plu - CVE-2016-20082
WordPress Plugin Abtest Local File Inclusion via abtest_admi - CVE-2016-20080
WordPress Brandfolder Plugin 3.0 Local File Inclusion via ca - CVE-2016-20079
WordPress Dharma Booking 2.28.3 Local File Inclusion via pro - CVE-2016-20078
WordPress IMDb Profile Widget 1.0.8 Local File Inclusion via
V. Comments for CVE-2026-48133
No comments yet