PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-48135 checkpoint CVE debrief

A Check Point HTTP-based service contains a vulnerability in its HTTP request parsing and validation logic that can lead to incorrect handling of malformed HTTP requests. The vulnerability is classified as a heap-based buffer overflow (CWE-122) with a CVSS 3.1 score of 5.3 (MEDIUM severity). The attack vector is network-based, requires low attack complexity, no privileges, and no user interaction, with a low availability impact. The CVE was published on May 26, 2026 and last modified the same day. Check Point has published a security advisory (SK184991) providing remediation guidance. No known exploitation in ransomware campaigns has been reported, and the vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.

Vendor
checkpoint
Product
Quantum Security Gateway
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-26
Original CVE updated
2026-05-26
Advisory published
2026-05-26
Advisory updated
2026-05-26

Who should care

Organizations running Check Point security gateways, management servers, or other HTTP-based Check Point services should prioritize review of this advisory. Security teams responsible for perimeter defense and availability of security infrastructure should assess exposure and patch status.

Technical summary

The vulnerability exists in HTTP request parsing and validation within a Check Point HTTP-based service. Malformed HTTP requests can trigger incorrect handling, potentially leading to a heap-based buffer overflow condition. The attack requires no authentication and can be executed remotely over the network. The primary impact is to availability, with no confidentiality or integrity impact per the CVSS scoring.

Defensive priority

medium

Recommended defensive actions

  • Review Check Point security advisory SK184991 for affected product versions and patch availability
  • Apply vendor-provided security updates to affected Check Point HTTP-based services
  • Implement network segmentation to limit exposure of Check Point management and gateway interfaces
  • Monitor HTTP request logs for anomalous or malformed request patterns directed at Check Point services
  • Verify HTTP request size limits and validation controls are enforced at perimeter security devices

Evidence notes

The vulnerability description indicates incorrect handling of malformed HTTP requests in a Check Point HTTP-based service. The CVSS vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) confirms network attackability with low availability impact. CWE-122 (Heap-based Buffer Overflow) is cited as the weakness type. The vendor identification is supported by the reference domain candidate 'Checkpoint' and the official Check Point security advisory reference.

Official resources

Check Point disclosed this vulnerability via CVE publication on May 26, 2026, with an accompanying security advisory.