CVE-2026-50751: Check Point VPN authentication bypass in IKEv1 key exchange

CVE-2026-50751 · Severity: critical · CVSS 9.8 · Exploited in the wild · Published 2026-06-08

Check Point Security Gateways are used to provide secure remote access to corporate networks. A flaw in how these gateways verify identities during the login process allows an unauthorized person to connect to the corporate VPN without needing a valid password. This could allow an attacker to gain full access to internal company resources and sensitive data.

Technologies: Check Point Security Gateway. Vendors: Check Point.

Quick answers

Is CVE-2026-50751 exploited in the wild?
Yes. CVE-2026-50751 is known to be exploited in the wild, first recorded on 8 June 2026. Treat it as urgent.
How severe is CVE-2026-50751?
Critical severity, with a CVSS score of 9.8, published 8 June 2026.
Which products and versions are affected?
Check Point Security Gateway.
Is there a fix for CVE-2026-50751?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-50751 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-50751?
Check whether you run Check Point Mobile Access VPN, Check Point Remote Access VPN or Check Point Security Gateway. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper authentication vulnerability (CWE-287) exists in Check Point Security Gateway's Remote Access and Mobile Access components. The flaw is rooted in a logic flow weakness during certificate validation within the deprecated IKEv1 key exchange protocol. An unauthenticated remote attacker can exploit this by initiating an IKEv1 session, allowing them to bypass standard user authentication requirements. Successful exploitation enables the attacker to establish a fully functional remote access VPN connection without providing a valid password. This vulnerability has been reported as exploited in the wild.

Affected products

  • Check Point Security Gateway

Timeline

  • 2026-06-08: disclosed
  • 2026-06-08: advisory
  • 2026-06-08: exploited: Reported as exploited in the wild at the time of publication.

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.