Skip to content

CVE · Exploited · On CISA KEV

CVE-2026-50751

Check Point Security Gateway Improper Authentication Vulnerability

9.3
CVSS 3.1
1
story
JUN 8
added to KEV
Severity
9.3 Critical · vendor score
Vendor
Check Point
Product
Security Gateway
Published
Jun 8, 2026
Added to KEV
Jun 8, 2026
KEV deadline
Jun 11, 2026
Ransomware use
Known
Weakness
CWE-287

What it is

Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. IntrusionsCheck Point VPN Flaw Targeted by Ransomware ActorsThe vulnerability is a critical one and Check Point Research said that it’s likely that the actor targeting the bug is a financially motivated group.DENNIS FISHER · 2 MIN

Official references

5 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Fixsupport.checkpoint.com/results/sk/sk185033Vendor advisoryblog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol