VULNERABILITY INTELLIGENCE

CVE-2026-50751

CVSS score9.3 CRITICAL
EPSS probability85.34%
CISA KEVKnown exploited vulnerability
Published2026-06-08
Last modified2026-08-04
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Known Exploited Vulnerability

Check Point Security Gateway Improper Authentication Vulnerability

Vendor / product: Check Point / Security Gateway

Description

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Weakness classification

  • cve@checkpoint.com: CWE-287

Primary references