R81.20 Jumbo Hotfix Take 141

Take 141 - Improvements and Resolved Issues

PRJ-67983,

PMTR-126652

Security Gateway

UPDATE: Resolved CVE-2026-48131 - VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero. Refer to sk184981.

PRJ-67838,

PMTR-126457

Security Gateway

UPDATE: Resolved CVE-2026-48132 - VPN process may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP. Refer to sk184982.

PRJ-67873,

PMTR-126538

Security Gateway

UPDATE: Resolved CVE-2026-48133 - Identity Awareness Captive Portal - Unauthenticated Local File Inclusion. Refer to sk184993.

PRJ-67835,

PMTR-126454

Security Gateway

UPDATE: Resolved CVE-2026-48134 - SQL injection issue in UserCheck Web Portal when DLP is active. Refer to sk184983.

PRJ-68008,

PMTR-126694

Security Gateway

UPDATE: Resolved CVE-2026-48135 - HTTP service can incorrectly process malformed HTTP requests. Refer to sk184991.

PRJ-68354,

PMTR-126828

Security Management

UPDATE: Resolved CVE-2026-48136 - Authenticated Administrator Role-Based Access Control Bypass in Compliance. Refer to sk184992.

This Jumbo Hotfix Accumulator Take includes dozens of code and functionality hardening changes.

PRJ-65594,

HEC-1347

HCP

UPDATE: Added a new HCP test that analyzes load balancing and NAT utilization, and suggests optimal distribution adjustments accordingly. Refer to sk171436.

PRJ-67789,

ODU-3852,

PRJ-67785,

ODU-3894,

PRJ-68754,

ODU-4023

Automatic Updates - Web SmartConsole

UPDATE: New features and improvements are released in Take 165 via self-updatable package. Refer to sk170314.

PRJ-66727,

ODU-3666

Automatic Updates - Log Exporter

UPDATE: Added Take 53 to Log Exporter Auto Update Deployment. Refer to sk182866.

PRJ-66618,

ODU-3347

Automatic Updates - Security Management

UPDATE: Added Update 4 of Server-Side Change Report Generator Release Updates. Refer to sk179508.

PRJ-67187,

ODU-3845,

PRJ-68134,

ODU-3901

Automatic Updates - Policy Insights

UPDATE: Added Take 82, Take 87 of Policy Insights Release Updates. Refer to sk183421.

PRJ-67224,

ODU-3738,

PRJ-67866,

ODU-3957

Automatic Updates - HCP

UPDATE: Added Update 26, Update 27 of HealthCheck Point (HCP) Release. Refer to sk171436.

PRJ-67227,

ODU-3467

Automatic Updates - Threat Prevention

UPDATE: Added Update 28 of Autonomous Threat Prevention Management Integration Release. Refer to sk167109.

PRJ-67869,

ODU-3950

Automatic Updates - CPSDC

UPDATE: Added Take 43 of Check Point Support Data Collector (CPSDC) for Scalable Platforms and Maestro Security Appliances. Refer to sk164414.

PRJ-68481,

PMTR-127053

CPView

The CPVIEWD daemon may exit during startup.

PRJ-68886,

PRJ-68715,

PMTR-127505

VPN

Remote Access Endpoint Security Client may disconnect and reconnect approximately every 15 seconds.