CVE-2026-50751

Warnung

Medienbericht

EPSS 82.55%
Veröffentlicht 08.06.2026 11:07:15
Zuletzt bearbeitet 04.08.2026 05:16:39
Erkennungen
Login

User Authentication Bypass in VPN Remote Access and Mobile Access

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Betroffene Produkte Warnungen 2 Metriken 2 CWE 1 Referenzen 19

NVD 73 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Checkpoint ≫ Gaia Os Version >= r80.40 < r81.20

Checkpoint ≫ Gaia Os Version r81.20 Update -

Checkpoint ≫ Gaia Os Version r81.20 Update take_10

Checkpoint ≫ Gaia Os Version r81.20 Update take_101

Checkpoint ≫ Gaia Os Version r81.20 Update take_103

Checkpoint ≫ Gaia Os Version r81.20 Update take_105

Checkpoint ≫ Gaia Os Version r81.20 Update take_111

Checkpoint ≫ Gaia Os Version r81.20 Update take_113

Checkpoint ≫ Gaia Os Version r81.20 Update take_115

Checkpoint ≫ Gaia Os Version r81.20 Update take_118

Checkpoint ≫ Gaia Os Version r81.20 Update take_119

Checkpoint ≫ Gaia Os Version r81.20 Update take_120

Checkpoint ≫ Gaia Os Version r81.20 Update take_122

Checkpoint ≫ Gaia Os Version r81.20 Update take_126

Checkpoint ≫ Gaia Os Version r81.20 Update take_127

Checkpoint ≫ Gaia Os Version r81.20 Update take_14

Checkpoint ≫ Gaia Os Version r81.20 Update take_141

Checkpoint ≫ Gaia Os Version r81.20 Update take_24

Checkpoint ≫ Gaia Os Version r81.20 Update take_26

Checkpoint ≫ Gaia Os Version r81.20 Update take_38

Checkpoint ≫ Gaia Os Version r81.20 Update take_41

Checkpoint ≫ Gaia Os Version r81.20 Update take_43

Checkpoint ≫ Gaia Os Version r81.20 Update take_45

Checkpoint ≫ Gaia Os Version r81.20 Update take_53

Checkpoint ≫ Gaia Os Version r81.20 Update take_54

Checkpoint ≫ Gaia Os Version r81.20 Update take_65

Checkpoint ≫ Gaia Os Version r81.20 Update take_70

Checkpoint ≫ Gaia Os Version r81.20 Update take_76

Checkpoint ≫ Gaia Os Version r81.20 Update take_79

Checkpoint ≫ Gaia Os Version r81.20 Update take_8

Checkpoint ≫ Gaia Os Version r81.20 Update take_84

Checkpoint ≫ Gaia Os Version r81.20 Update take_89

Checkpoint ≫ Gaia Os Version r81.20 Update take_90

Checkpoint ≫ Gaia Os Version r81.20 Update take_92

Checkpoint ≫ Gaia Os Version r81.20 Update take_96

Checkpoint ≫ Gaia Os Version r81.20 Update take_98

Checkpoint ≫ Gaia Os Version r81.20 Update take_99

Checkpoint ≫ Gaia Os Version r82 Update -

Checkpoint ≫ Gaia Os Version r82 Update take_10

Checkpoint ≫ Gaia Os Version r82 Update take_103

Checkpoint ≫ Gaia Os Version r82 Update take_12

Checkpoint ≫ Gaia Os Version r82 Update take_14

Checkpoint ≫ Gaia Os Version r82 Update take_18

Checkpoint ≫ Gaia Os Version r82 Update take_19

Checkpoint ≫ Gaia Os Version r82 Update take_25

Checkpoint ≫ Gaia Os Version r82 Update take_33

Checkpoint ≫ Gaia Os Version r82 Update take_34

Checkpoint ≫ Gaia Os Version r82 Update take_36

Checkpoint ≫ Gaia Os Version r82 Update take_39

Checkpoint ≫ Gaia Os Version r82 Update take_41

Checkpoint ≫ Gaia Os Version r82 Update take_43

Checkpoint ≫ Gaia Os Version r82 Update take_44

Checkpoint ≫ Gaia Os Version r82 Update take_60

Checkpoint ≫ Gaia Os Version r82 Update take_73

Checkpoint ≫ Gaia Os Version r82 Update take_91

Checkpoint ≫ Gaia Os Version r82.10 Update -

Checkpoint ≫ Gaia Os Version r82.10 Update take_19

Checkpoint ≫ Gaia Os Version r82.10 Update take_6

Checkpoint ≫ Gaia Embedded Version >= r80.20.00 < r81.10.17

   Checkpoint ≫ Quantum Spark 1530 Version -
   Checkpoint ≫ Quantum Spark 1550 Version -
   Checkpoint ≫ Quantum Spark 1570 Version -
   Checkpoint ≫ Quantum Spark 1570r Version -
   Checkpoint ≫ Quantum Spark 1590 Version -
   Checkpoint ≫ Quantum Spark 1595r Version -
   Checkpoint ≫ Quantum Spark 1600 Version -
   Checkpoint ≫ Quantum Spark 1800 Version -
   Checkpoint ≫ Quantum Spark 1900 Version -
   Checkpoint ≫ Quantum Spark 2000 Version -

Checkpoint ≫ Gaia Embedded Version r81.10.17 Update -

Checkpoint ≫ Gaia Embedded Version r81.10.17 Update build_996004508

Checkpoint ≫ Gaia Embedded Version r81.10.17 Update build_996004620

Checkpoint ≫ Gaia Embedded Version r81.10.17 Update build_996004653

Checkpoint ≫ Gaia Embedded Version r81.10.17 Update build_996004721

Checkpoint ≫ Gaia Embedded Version r81.10.17 Update build_996004892

Checkpoint ≫ Gaia Embedded Version >= r80.20.00 < r82.00.10

   Checkpoint ≫ Quantum Spark 1535 Version -
   Checkpoint ≫ Quantum Spark 1555 Version -
   Checkpoint ≫ Quantum Spark 1575 Version -
   Checkpoint ≫ Quantum Spark 1575r Version -
   Checkpoint ≫ Quantum Spark 2530 Version -
   Checkpoint ≫ Quantum Spark 2550 Version -
   Checkpoint ≫ Quantum Spark 2560 Version -
   Checkpoint ≫ Quantum Spark 2570 Version -
   Checkpoint ≫ Quantum Spark 2580 Version -
   Checkpoint ≫ Quantum Spark 2590 Version -

Checkpoint ≫ Gaia Embedded Version r82.00.10 Update -

Checkpoint ≫ Gaia Embedded Version r82.00.10 Update build_998001559

Checkpoint ≫ Gaia Embedded Version r82.00.10 Update build_998001562

Checkpoint ≫ Gaia Embedded Version r82.00.10 Update build_998002110

Checkpoint ≫ Gaia Embedded Version r82.00.10 Update build_998002112

Checkpoint ≫ Gaia Embedded Version r82.00.10 Update build_998002133

Checkpoint ≫ Gaia Embedded Version r82.00.10 Update build_998002203

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

08.06.2026: CISA Known Exploited Vulnerabilities (KEV) Catalog

Check Point Security Gateway Improper Authentication Vulnerability

Schwachstelle

Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Beschreibung

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen

08.06.2026:

https://www.cert.at/de/warnungen/2026/6/angriffe-gegen-checkpoint-vpn-losungen-hotfix-verfugbar

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	82.55%	0.996

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	9.3	3.9	4.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.