« Volver al listado

CVE-2026-48134

Estado: Pendiente de análisisMedia (5.6)—

When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to manipulate the Security Gateway's stored DLP/UserCheck incident information. This could lead to disruptions such as loss of stored incident entries, incorrect handling of pending approvals, or resource impact if the issue is abused repeatedly. Exposure is reduced if the UserCheck Portal is not accessible from untrusted networks.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Checkpoint — DLPAICheckpoint — Usercheck WEB PortalAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-48134",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-48134",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-06-02T14:15:04.599414Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve@checkpoint.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.6,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "cve@checkpoint.com",
      "affectedData": [
        {
          "vendor": "checkpoint",
          "product": "Quantum Security Gateway",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 6 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 91 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 127 or below"
            },
            {
              "status": "affected",
              "version": "All releases from R81.10 and below"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-05-26T14:16:38.870",
  "references": [
    {
      "url": "https://support.checkpoint.com/results/sk/sk184983",
      "source": "cve@checkpoint.com"
    }
  ],
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cve@checkpoint.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to manipulate the Security Gateway's stored DLP/UserCheck incident information. This could lead to disruptions such as loss of stored incident entries, incorrect handling of pending approvals, or resource impact if the issue is abused repeatedly.\nExposure is reduced if the UserCheck Portal is not accessible from untrusted networks."
    },
    {
      "lang": "es",
      "value": "Cuando el DLP está activo, el Portal Web de UserCheck contiene un problema de manejo de entradas en el flujo UserChoice. Bajo condiciones específicas, un atacante que puede acceder a la página UserCheck Ask podría intentar manipular la información de incidente DLP/UserCheck almacenada del Security Gateway. Esto podría llevar a interrupciones como pérdida de entradas de incidente almacenadas, manejo incorrecto de aprobaciones pendientes, o impacto en los recursos si el problema se abusa repetidamente.\nLa exposición se reduce si el Portal UserCheck no es accesible desde redes no confiables."
    }
  ],
  "lastModified": "2026-07-24T11:10:00.170",
  "sourceIdentifier": "cve@checkpoint.com"
}