Check Point Security Gateway/Spark Firewall IKE Improper Length Validation Vulnerability (CVE-2026-48132) Patch

Vulnerability Overview Vulnerability Name: CVE-2026-48132 Description: The VPN service may unexpectedly restart when processing NAT-T 4500/UDP traffic. Cause: The Security Gateway does not properly validate length values in certain IKE packets, which can cause specially crafted or malformed packets to unexpectedly terminate the VPN processing service, resulting in service disruption (temporary interruption of VPN negotiation/traffic). Impact Scope Affected Products: - Security Gateways - Spark Firewall Affected Versions: - R77.20 (E0S), R77.30 (E0S), R80.10 (E0S), R80.20 (E0S), R80.20.X (E0S), R80.30 (E0S), R80.40 (E0S), R81 (E0S), R81.10 (E0S), R81.10.X, R81.20, R82, R82.00.X, R82.10 Specific Impact: - R82.10 with Jumbo Hotfix Take 6 or below - R82 with Jumbo Hotfix Take 91 or below - R81.20 with Jumbo Hotfix Take 127 or below - All versions from R81.10 and below Remediation Mitigation: - Enable the IPS protection "IKE Improper Length Validation" in Protection mode. - Steps: 1. In SmartConsole, navigate to Security Policies > Threat Prevention. 2. At the bottom, click Custom Policy Tools and select IPS Protection. 3. Search for "IKE Improper Length Validation". 4. Double-click to open. 5. Edit the Action and ensure it is set to Prevent. Fixed Versions: - Security Gateways: - Jumbo Hotfix Accumulator for R82.10 starting from Take 19 - Jumbo Hotfix Accumulator for R82 starting from Take 103 - Jumbo Hotfix Accumulator for R81.20 starting from Take 141 - Spark Firewalls: - R81.10.17 - sk183153 - R82.00.10 - sk184357 Additional Information Article Attributes: - Access Level: General - Severity: High - Status: Approved - Creation Date: 2026-05-20 - Last Modified Date: 2026-05-26 Page Bottom Feedback: - Was this page helpful? (Yes/No) Information Not Found: - Customer service team support available, online 24/7. Footer Copyright Notice: - ©1994-2026 Check Point Software Technologies Ltd. All rights reserved. - Privacy Policy Summary This vulnerability involves a length validation issue in Security Gateways and Spark Firewalls when processing specific IKE packets, which may lead to unexpected VPN service restarts. Remediation includes enabling a specific IPS protection rule and upgrading to the specified versions of the Jumbo Hotfix Accumulator.

Goal Reached Thanks to every supporter — we hit 100%!

Check Point Security Gateway/Spark Firewall IKE Improper Length Validation Vulnerability (CVE-2026-48132) Patch