CVE-2026-50751

CRITICALCVSS 9.3Known Exploited

CISA Known Exploited Vulnerability

https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/ ; https://support.checkpoint.com/results/sk/sk185033?_gl=1*1wqeqhc*_gcl_au*MTI1MzE5MjI2LjE3ODA5MzQ1NTM. ; https://nvd.nist.gov/vuln/detail/CVE-2026-50751

Remediation deadline: June 11, 2026

Ransomware use: Known

Description

Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Timeline

Published:June 8th, 2026 12:16 PM

Last modified:August 4th, 2026 5:16 AM

Added to KEV:June 8th, 2026

CVSS Scoring

CVSS v3: 9.3 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Affected Software

From NVD CPE configuration data

Vendors

checkpoint

Products

gaia_osgaia_embedded

Weaknesses (CWE)

CWE-287

References & Reports

Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute