What’s Vulnerable › Vulnerabilities

CVE-2026-50751: Check Point Security Gateway Improper Authentication Vulnerability

• Severity: critical (CVSS 9.3 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2026-06-08
• EPSS: 85.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-06-08 · updated 2026-08-04
• Weakness: CWE-287

Description

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Affected products

• checkpoint Gaia Embedded: from r80.20.00 before r81.10.17; from r80.20.00 before r82.00.10; r81.10.17, r81.10.17-build_996004508, r81.10.17-build_996004620, r81.10.17-build_996004653, r81.10.17-build_996004721, r81.10.17-build_996004892 (+7) — fixed in r81.10.17, r82.00.10
• checkpoint Gaia Os: from r80.40 before r81.20; r81.20, r81.20-take_10, r81.20-take_101, r81.20-take_103, r81.20-take_105, r81.20-take_111 (+51) — fixed in r81.20

How to fix

Upgrade to a fixed version: checkpoint Gaia Embedded r81.10.17, r82.00.10; checkpoint Gaia Os r81.20. Check the vendor advisory for mitigations.

In the news

• Marking Your Own Homework (Check Point Remote Access VPN IKEv1 Authentication Bypass CVE-2026-50751)

References

• https://support.checkpoint.com/results/sk/sk185033
• https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-50751

Get alerted when CVE-2026-50751 or the next vulnerability affects your stack