CVE-2026-48132
VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP
Severity
High 8.1
CVSS 3.1
Exploited
Not listed
EPSS
0.021
81.3th percentile
Discovered by
Not disclosed
Published
May 26, 2026
Assigned by checkpoint
Description
The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP). As a result, a specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, leading to denial of service (temporary interruption of VPN negotiations/traffic).
Weakness: CWE-125
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Check Point | Quantum Security Gateway | Firewall / NGFW | cna-assigner |
Vendor-reported products (1)
- checkpoint · Quantum Security Gateway