CVE-2026-48133: high-severity vulnerability in checkpoint Quantum Security Gateway
Identity Awareness Captive Portal - Unauthenticated Local File Inclusion
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
When a security gateway has Identity Awareness enabled with browser-based authentication, an unauthenticated user can read internal files on the server without logging in. This is dangerous because attackers can access sensitive system information without permission.
A local file inclusion vulnerability exists in the Identity Awareness captive portal (CWE-98) when Browser-Based Authentication is enabled. An unauthenticated attacker can exploit path traversal or file access mechanisms to read arbitrary files from the Security Gateway filesystem. This allows information disclosure of sensitive internal data without authentication.
In the same product, most dangerous first.