Check Point · Security Gateway
CVE-2026-50751
User Authentication Bypass in VPN Remote Access and Mobile Access
What it is
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
CISA: Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Deadline for US federal agencies: June 11, 2026
- Added to the CISA list
- June 8, 2026
- Published
- June 8, 2026
- Severity
- Critical 9.3 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 85% in the top 0.3% of all known vulnerabilities
- Weakness
- CWE-287
- More details
- NVD · CVE.org · CISA
All references (1)
More exploited flaws from Check Point
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 22, 2026 | Improper Certificate Validation | Multiple Products | Critical 9.8 | 54% |
| Sep 22, 2026 | Path Traversal | Multiple Products | Critical 9.8 | 92% |
| Jul 22, 2026 | Improper Authentication | SmartConsole | Critical 9.3 | 3.5% |
| May 30, 2024 | Information Disclosure | Quantum Security Gateways | High 8.6 | >99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.