CVE-2026-48134
MediumCVSS 5.6Exploitation Probability (EPSS)
Very high risk90th percentile - higher than 90% of all known CVEs
Summary
When DLP is active, the UserCheck Web Portal has an input-handling issue in the UserChoice flow. An attacker with access to the UserCheck Ask page could manipulate stored DLP/UserCheck incident information, leading to loss of incident entries, incorrect handling of pending approvals, or resource impact if abused repeatedly.
Risk Assessment
Risks include disruption of DLP functionality, loss of incident data, and potential resource exhaustion. Exposure is reduced if the UserCheck Portal is not accessible from untrusted networks.
Recommendation
Restrict access to the UserCheck Portal to trusted networks only. Apply vendor patches if available. Monitor the system for abuse.
Original NVD description (English source)
When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to manipulate the Security Gateway's stored DLP/UserCheck incident information. This could lead to disruptions such as loss of stored incident entries, incorrect handling of pending approvals, or resource impact if the issue is abused repeatedly. Exposure is reduced if the UserCheck Portal is not accessible from untrusted networks.