CVE-2026-48135
BaseFortify
Publication date: 2026-05-26
Last updated on: 2026-05-26
Assigner: Check Point Software Technologies Ltd.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| checkpoint_software_technologies | check_point_http_service | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-122 | A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves a Check Point HTTP-based service that can incorrectly handle malformed HTTP requests. The issue is related to how the service parses and validates HTTP requests, potentially leading to improper processing of these malformed requests.
How can this vulnerability impact me? :
The vulnerability has a CVSS base score of 5.3, indicating a moderate severity. It allows an attacker to send malformed HTTP requests that the service may incorrectly process, which can lead to availability impacts (denial of service or service disruption). However, it does not impact confidentiality or integrity.