Check Point Frontier AI Models Readiness Program – Security Updates

[PhoneBoy]

At Check Point we don’t wait for threats to evolve; we evolve ahead of them. This is why we’ve been running our Frontier AI Models Readiness Program: a proactive, structured initiative designed to ensure that our products remain resilient as AI models grow increasingly capable of understanding complex software systems and assisting adversaries in attacking them.

As part of this program, we conducted large-scale AI-driven code scanning across our products, performed extensive security reviews, hardened components where needed, refined our time-to-patch procedures, and accelerated our protection development processes to meet the pace of emerging AI-driven threats.

The Jumbo Hotfixes released on May 26th is one of the first direct outcomes of that effort and includes fixes for the following CVEs:

CVE	Description	CVSS	In the Wild
CVE-2026-48131	VPND IKE Fragment Reassembly – Heap Out-of-Bounds Write via Sequence Number Zero	8.1	NO
CVE-2026-48132	VPN service may restart unexpectedly when processing IKE traffic over NAT-T (UDP/4500)	8.1	NO
CVE-2026-48133	NAC Captive Portal – Unauthenticated Local File Inclusion	7.5	NO
CVE-2026-48134	SQL injection issue in UserCheck Portal when DLP Software Blade is active	5.6	NO
CVE-2026-48135	Hardening the HTTP parser against malformed/malicious input	5.3	NO
CVE-2026-48136	Compliance Best Practice metadata manipulation issue when Compliance Software Blade is enabled	4.1	NO

While each CVE has mitigation steps associated with it that are provided in the SKs linked above, we recommend installing the JHF as it includes additional security hardening.

The releases that provide fixes for the above CVEs include:

• Jumbo Hotfix Accumulator for R82.10 starting from Take 19
• Jumbo Hotfix Accumulator for R82 starting from Take 103
• Jumbo Hotfix Accumulator for R81.20 starting from Take 141
• R81.10.17 for Spark Firewalls starting from build 996004892 - sk183153
• R82.00.10 for Spark Firewalls starting from build 998002203- sk184357