CVE-2026-48133 — Identity Awareness Captive Portal - Unauthenticated Local File Inclusion

CVE-2026-48133

Identity Awareness Captive Portal - Unauthenticated Local File Inclusion PUBLISHED

Description (CNA)

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway.

Affected (CNA)

Vendor / product	Versions
checkpoint / Quantum Security Gateway	affected R82.10 with Jumbo Hotfix Take 6 or below; affected R82 with Jumbo Hotfix Take 91 or below; affected R81.20 with Jumbo Hotfix Take 127 or below; affected All releases from R81.10 and below

CWE

CWE-98

References

https://support.checkpoint.com/results/sk/sk184993

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.