Vulnerability · Published May 26, 2026 · Assigned by checkpoint
CVE-2026-48135HTTP service can incorrectly process malformed HTTP requests
Medium 5.3
In plain English
A medium-severity heap buffer overflow in Quantum Security Gateway from checkpoint. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 85% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)2.6%top 14.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A Check Point HTTP-based service can incorrectly handle malformed HTTP requests. The issue is related to HTTP request parsing and validation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| checkpoint | Quantum Security Gateway | R82.10 with Jumbo Hotfix Take 6 or belowR82 with Jumbo Hotfix Take 91 or belowR81.20 with Jumbo Hotfix Take 127 or belowAll releases from R81.10 and below |
Weakness: CWE-122 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L