Actively exploited in the wild
Check Point Security Gateway Improper Authentication Vulnerability
Check Point - Security Gateway · Listed in the CISA KEV since 2026-06-08. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2026-50751
CriticalCVSS 9.3KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange. An unauthenticated attacker can bypass user authentication and establish a VPN connection without a valid password.
Risk Assessment
An attacker can gain unauthorized access to the VPN network, leading to data confidentiality and integrity breaches.
Recommendation
Disable deprecated IKEv1 and configure IKEv2. Update the software to a patched version.
Original NVD description (English source)
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.