Check Point Security Gateways vulnerable to denial of service
Multiple vulnerabilities in Check Point Security Gateways and Spark Firewalls enable remote denial of service, data confidentiality breaches, and integrity compromise.
Sourcecert.ssi.gouv.fr — open the original
What to check
- Applies to
- The 6 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation
- No exploitation in the wild and no public exploit is recorded for the CVEs named.
CERT-FR has published an advisory detailing multiple vulnerabilities affecting Check Point Security Gateways and Spark Firewalls. The flaws impact Security Gateways running R81.20 (without patch 141), R82 (without patch 103), and R82.10 (without patch 19), as well as Spark Firewalls versions R81 prior to R81.10.17 and R82 prior to R82.00.10. Six CVEs have been assigned to these issues (CVE-2026-48131 through CVE-2026-48136).
The vulnerabilities enable various attack vectors including remote denial of service, SQL injection, security policy bypass, and compromise of data confidentiality and integrity. Check Point has released patches for all affected versions, documented across six separate security bulletins published on May 26, 2026.
Organizations running affected Check Point firewall products should prioritize applying the vendor-supplied patches. Given that these are perimeter security devices and the range of potential impacts includes policy bypass and remote exploitation, prompt remediation is essential to maintain network security posture.
Mentioned in this report
Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0650
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,433 reports from 149 sources, 661 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs