Identity Awareness Captive Portal – Unauthenticated Local File Inclusion_CVE-2026-48133

{
    "lastseen": "",
    "description": "When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway.",
    "published": "2026-05-26T12:56:56.250Z",
    "modified": "2026-05-26T12:56:56.250Z",
    "type": "cve",
    "title": "Identity Awareness Captive Portal - Unauthenticated Local File Inclusion",
    "source": "checkpoint",
    "references": "https://support.checkpoint.com/results/sk/sk184993",
    "id": "CVE-2026-48133",
    "bulletinFamily": "",
    "cwe": [
        "CWE-98"
    ],
    "cvelist": null,
    "sourceData": "checkpoint Quantum Security Gateway R82.10 with Jumbo Hotfix Take 19 or below\ncheckpoint Quantum Security Gateway R82 with Jumbo Hotfix Take 91 or below\ncheckpoint Quantum Security Gateway R81.20 with Jumbo Hotfix Take 127 or below\ncheckpoint Quantum Security Gateway All releases from R81.10 and below",
    "sourceHref": "",
    "cvss": {
        "score": 7.5,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Quantum Security Gateway",
    "version": "R82.10 with Jumbo Hotfix Take 19 or below",
    "vendor": "checkpoint",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}