A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
References
| Link | Resource |
|---|---|
| https://support.checkpoint.com/results/sk/sk185033 | Mitigation Patch Vendor Advisory |
| https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/ | Vendor Advisory |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-50751 | US Government Resource |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
No history.
Information
Published : 2026-06-08 12:16
Updated : 2026-08-04 05:16
NVD link : CVE-2026-50751
Mitre link : CVE-2026-50751
CVE.ORG link : CVE-2026-50751
JSON object : View
Products Affected
checkpoint
- quantum_spark_2000
- quantum_spark_1590
- quantum_spark_1575r
- quantum_spark_1570r
- quantum_spark_1595r
- quantum_spark_1575
- gaia_embedded
- quantum_spark_1535
- quantum_spark_2550
- quantum_spark_2570
- quantum_spark_2580
- quantum_spark_1900
- quantum_spark_1555
- quantum_spark_1550
- quantum_spark_1530
- quantum_spark_2530
- quantum_spark_2560
- gaia_os
- quantum_spark_2590
- quantum_spark_1800
- quantum_spark_1570
- quantum_spark_1600
CWE
CWE-287
Improper Authentication
