CVE Catalog
CVE-2026-48133
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk4.75%
91th percentile - higher than 91% of all known CVEs
Summary
When the Identity Awareness blade is enabled with Browser-Based Authentication on the Security Gateway, an unauthenticated user may be able to read certain internal files on the gateway.
Risk Assessment
An unauthenticated attacker could access sensitive configuration files or other internal data on the Security Gateway.
Recommendation
Disable Browser-Based Authentication for Identity Awareness if not required, or apply additional access controls.
Original NVD description (English source)
When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway.