VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP_CVE-2026-48132

{
    "lastseen": "",
    "description": "The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP). As a result, a specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, leading to denial of service (temporary interruption of VPN negotiations/traffic).",
    "published": "2026-05-26T12:56:47.693Z",
    "modified": "2026-05-26T12:56:47.693Z",
    "type": "cve",
    "title": "VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP",
    "source": "checkpoint",
    "references": "https://support.checkpoint.com/results/sk/sk184982",
    "id": "CVE-2026-48132",
    "bulletinFamily": "",
    "cwe": [
        "CWE-125"
    ],
    "cvelist": null,
    "sourceData": "checkpoint Quantum Security Gateway R82.10 with Jumbo Hotfix Take 19 or below\ncheckpoint Quantum Security Gateway R82 with Jumbo Hotfix Take 91 or below\ncheckpoint Quantum Security Gateway R81.20 with Jumbo Hotfix Take 127 or below\ncheckpoint Quantum Security Gateway All releases from R81.10 and below",
    "sourceHref": "",
    "cvss": {
        "score": 7.4,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Quantum Security Gateway",
    "version": "R82.10 with Jumbo Hotfix Take 19 or below",
    "vendor": "checkpoint",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}