Vulnerability Details CVE-2026-50751
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.118
EPSS Ranking 93.9%
CVSS Severity
CVSS v3 Score 9.3
Proposed Action
Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
Ransomware Campaign
Known
References
Products affected by CVE-2026-50751
-
cpe:2.3:h:checkpoint:quantum_spark_1530:-
-
cpe:2.3:h:checkpoint:quantum_spark_1535:-
-
cpe:2.3:h:checkpoint:quantum_spark_1550:-
-
cpe:2.3:h:checkpoint:quantum_spark_1555:-
-
cpe:2.3:h:checkpoint:quantum_spark_1570:-
-
cpe:2.3:h:checkpoint:quantum_spark_1570r:-
-
cpe:2.3:h:checkpoint:quantum_spark_1575:-
-
cpe:2.3:h:checkpoint:quantum_spark_1575r:-
-
cpe:2.3:h:checkpoint:quantum_spark_1590:-
-
cpe:2.3:h:checkpoint:quantum_spark_1595r:-
-
cpe:2.3:h:checkpoint:quantum_spark_1600:-
-
cpe:2.3:h:checkpoint:quantum_spark_1800:-
-
cpe:2.3:h:checkpoint:quantum_spark_1900:-
-
cpe:2.3:h:checkpoint:quantum_spark_2000:-
-
cpe:2.3:h:checkpoint:quantum_spark_2530:-
-
cpe:2.3:h:checkpoint:quantum_spark_2550:-
-
cpe:2.3:h:checkpoint:quantum_spark_2560:-
-
cpe:2.3:h:checkpoint:quantum_spark_2570:-
-
cpe:2.3:h:checkpoint:quantum_spark_2580:-
-
cpe:2.3:h:checkpoint:quantum_spark_2590:-
-
cpe:2.3:o:checkpoint:gaia_embedded:*
-
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17
-
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10
-
cpe:2.3:o:checkpoint:gaia_os:r81
-
cpe:2.3:o:checkpoint:gaia_os:r81.10
-
cpe:2.3:o:checkpoint:gaia_os:r81.20
-
cpe:2.3:o:checkpoint:gaia_os:r82
-
cpe:2.3:o:checkpoint:gaia_os:r82.10