CVE-2026-48134

When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to manipulate the Security Gateway's stored DLP/UserCheck incident information. This could lead to disruptions such as loss of stored incident entries, incorrect handling of pending approvals, or resource impact if the issue is abused repeatedly. Exposure is reduced if the UserCheck Portal is not accessible from untrusted networks.

CVSS v3 5.6 MEDIUM

5.6^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://support.checkpoint.com/results/sk/sk184983

Configurations

No configuration.

History

No history.

Information

Published : 2026-05-26 14:16

Updated : 2026-07-24 11:10

NVD link : CVE-2026-48134

Mitre link : CVE-2026-48134

CVE.ORG link : CVE-2026-48134

JSON object : View

Products Affected

No product.

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2026-48134", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-48134", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-02T14:15:04.599414Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cve@checkpoint.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 2.2}]}, "affected": [{"source": "cve@checkpoint.com", "affectedData": [{"vendor": "checkpoint", "product": "Quantum Security Gateway", "versions": [{"status": "affected", "version": "R82.10 with Jumbo Hotfix Take 6 or below"}, {"status": "affected", "version": "R82 with Jumbo Hotfix Take 91 or below"}, {"status": "affected", "version": "R81.20 with Jumbo Hotfix Take 127 or below"}, {"status": "affected", "version": "All releases from R81.10 and below"}]}]}], "published": "2026-05-26T14:16:38.870", "references": [{"url": "https://support.checkpoint.com/results/sk/sk184983", "source": "cve@checkpoint.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cve@checkpoint.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to manipulate the Security Gateway's stored DLP/UserCheck incident information. This could lead to disruptions such as loss of stored incident entries, incorrect handling of pending approvals, or resource impact if the issue is abused repeatedly.\nExposure is reduced if the UserCheck Portal is not accessible from untrusted networks."}, {"lang": "es", "value": "Cuando el DLP est\u00e1 activo, el Portal Web de UserCheck contiene un problema de manejo de entradas en el flujo UserChoice. Bajo condiciones espec\u00edficas, un atacante que puede acceder a la p\u00e1gina UserCheck Ask podr\u00eda intentar manipular la informaci\u00f3n de incidente DLP/UserCheck almacenada del Security Gateway. Esto podr\u00eda llevar a interrupciones como p\u00e9rdida de entradas de incidente almacenadas, manejo incorrecto de aprobaciones pendientes, o impacto en los recursos si el problema se abusa repetidamente.\nLa exposici\u00f3n se reduce si el Portal UserCheck no es accesible desde redes no confiables."}], "lastModified": "2026-07-24T11:10:00.170", "sourceIdentifier": "cve@checkpoint.com"}