VPND IKE Fragment Reassembly – Heap Out-of-Bounds Write via Sequence Number Zero_CVE-2026-48131

{
    "lastseen": "",
    "description": "The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in denial of service (temporary disruption of VPN-related functionality).",
    "published": "2026-05-26T12:56:08.817Z",
    "modified": "2026-05-26T12:56:08.817Z",
    "type": "cve",
    "title": "VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero",
    "source": "checkpoint",
    "references": "https://support.checkpoint.com/results/sk/sk184981",
    "id": "CVE-2026-48131",
    "bulletinFamily": "",
    "cwe": [
        "CWE-122"
    ],
    "cvelist": null,
    "sourceData": "checkpoint Quantum Security Gateway R82.10 with Jumbo Hotfix Take 19 or below\ncheckpoint Quantum Security Gateway R82 with Jumbo Hotfix Take 91 or below\ncheckpoint Quantum Security Gateway R81.20 with Jumbo Hotfix Take 127 or below\ncheckpoint Quantum Security Gateway All releases from R81.10 and below",
    "sourceHref": "",
    "cvss": {
        "score": 8.1,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Quantum Security Gateway",
    "version": "R82.10 with Jumbo Hotfix Take 19 or below",
    "vendor": "checkpoint",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}