This vulnerability involves improper control of filenames in include/require statements within the PHP code of Checkpoint Quantum Security Gateway when the Identity Awareness blade is enabled with Browser-Based Authentication. An unauthenticated attacker may exploit this flaw to read internal files on the Security Gateway, potentially exposing sensitive information. The affected versions include R82.10 with Jumbo Hotfix Take 6 or below, R82 with Jumbo Hotfix Take 91 or below, R81.20 with Jumbo Hotfix Take 127 or below, and all releases from R81.10 and below. The CVSS v3.1 base score is 7.5, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact without integrity or availability impact. No vendor advisory or patch information is currently available.

Successful exploitation allows an unauthenticated attacker to read certain internal files on the Security Gateway, potentially leading to disclosure of sensitive information. The vulnerability does not impact integrity or availability but has a high confidentiality impact. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling the Identity Awareness blade with Browser-Based Authentication if feasible or applying any recommended workarounds from Checkpoint once available. Monitor vendor communications closely for updates.