CVE-2026-50752
HighCVSS 7.4Exploitation Probability (EPSS)
Very high risk91th percentile - higher than 91% of all known CVEs
Summary
A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication.
Risk Assessment
An attacker can intercept or modify traffic traversing the VPN tunnel, leading to breach of confidentiality and integrity of data transmitted between sites.
Recommendation
Migrate from IKEv1 to IKEv2 and apply appropriate security patches for the VPN devices in use.
Original NVD description (English source)
A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.