CRITICAL Actively exploited Used in ransomware CWE-287
CVE-2026-50751
User Authentication Bypass in VPN Remote Access and Mobile Access
Check Point·Security Gateway
9.3/ 10
CVSS 3.1
Critical severity
85%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 99.7% of all CVEs
Listed
CISA KEV catalog
- Added
- Jun 8, 2026
- Fix due
- Jun 11, 2026
- Ransomware
- Known use
Timeline
- Published
- Jun 8, 2026
- Updated
- Aug 4, 2026
- First covered
- Jul 2, 2026
- Latest story
- 2 months ago
Summary
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
CWE-287Improper Authentication.
Attack profile
Attack vectorNetwork
ComplexityLow
PrivilegesNone
User interactionNone
ScopeChanged
ConfidentialityHigh
IntegrityLow
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:NCISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Affected products
- Check Point Quantum Security GatewayR82.10 with Jumbo Hotfix Take 19 or belowR82 with Jumbo Hotfix Take 103 or belowR81.20 with Jumbo Hotfix Take 141 or belowR81.10, R81, and R80.40
- Check Point Spark FirewallsR80.20.X, R81.10.X, and R82.00.X