CVE-2026-48131
VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero
Exploited
Not listed
EPSS
0.004
32.3th percentile
Discovered by
Not disclosed
Published
May 26, 2026
Assigned by checkpoint
Description
The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in denial of service (temporary disruption of VPN-related functionality).
Weakness: CWE-122
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Check Point | Quantum Security Gateway | Firewall / NGFW | cna-assigner |
Vendor-reported products (1)
- checkpoint · Quantum Security Gateway