CVE-2026-50751

Warnung

Medienbericht

EPSS 70.1%
Veröffentlicht 08.06.2026 11:07:15
Zuletzt bearbeitet 09.06.2026 18:30:55
Quelle cve@checkpoint.com
CVE-Watchlists
Login
Unerledigt
Login

User Authentication Bypass in VPN Remote Access and Mobile Access

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Betroffene Produkte Warnungen 2 Metriken 2 CWE 1 Referenzen 14

NVD 73 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Checkpoint ≫ Gaia Os Version >= r80.40 < r81.20

Checkpoint ≫ Gaia Os Versionr81.20 Update-

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_10

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_101

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_103

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_105

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_111

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_113

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_115

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_118

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_119

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_120

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_122

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_126

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_127

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_14

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_141

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_24

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_26

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_38

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_41

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_43

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_45

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_53

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_54

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_65

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_70

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_76

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_79

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_8

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_84

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_89

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_90

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_92

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_96

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_98

Checkpoint ≫ Gaia Os Versionr81.20 Updatetake_99

Checkpoint ≫ Gaia Os Versionr82 Update-

Checkpoint ≫ Gaia Os Versionr82 Updatetake_10

Checkpoint ≫ Gaia Os Versionr82 Updatetake_103

Checkpoint ≫ Gaia Os Versionr82 Updatetake_12

Checkpoint ≫ Gaia Os Versionr82 Updatetake_14

Checkpoint ≫ Gaia Os Versionr82 Updatetake_18

Checkpoint ≫ Gaia Os Versionr82 Updatetake_19

Checkpoint ≫ Gaia Os Versionr82 Updatetake_25

Checkpoint ≫ Gaia Os Versionr82 Updatetake_33

Checkpoint ≫ Gaia Os Versionr82 Updatetake_34

Checkpoint ≫ Gaia Os Versionr82 Updatetake_36

Checkpoint ≫ Gaia Os Versionr82 Updatetake_39

Checkpoint ≫ Gaia Os Versionr82 Updatetake_41

Checkpoint ≫ Gaia Os Versionr82 Updatetake_43

Checkpoint ≫ Gaia Os Versionr82 Updatetake_44

Checkpoint ≫ Gaia Os Versionr82 Updatetake_60

Checkpoint ≫ Gaia Os Versionr82 Updatetake_73

Checkpoint ≫ Gaia Os Versionr82 Updatetake_91

Checkpoint ≫ Gaia Os Versionr82.10 Update-

Checkpoint ≫ Gaia Os Versionr82.10 Updatetake_19

Checkpoint ≫ Gaia Os Versionr82.10 Updatetake_6

Checkpoint ≫ Gaia Embedded Version >= r80.20.00 < r81.10.17

   Checkpoint ≫ Quantum Spark 1530 Version-
   Checkpoint ≫ Quantum Spark 1550 Version-
   Checkpoint ≫ Quantum Spark 1570 Version-
   Checkpoint ≫ Quantum Spark 1570r Version-
   Checkpoint ≫ Quantum Spark 1590 Version-
   Checkpoint ≫ Quantum Spark 1595r Version-
   Checkpoint ≫ Quantum Spark 1600 Version-
   Checkpoint ≫ Quantum Spark 1800 Version-
   Checkpoint ≫ Quantum Spark 1900 Version-
   Checkpoint ≫ Quantum Spark 2000 Version-

Checkpoint ≫ Gaia Embedded Versionr81.10.17 Update-

Checkpoint ≫ Gaia Embedded Versionr81.10.17 Updatebuild_996004508

Checkpoint ≫ Gaia Embedded Versionr81.10.17 Updatebuild_996004620

Checkpoint ≫ Gaia Embedded Versionr81.10.17 Updatebuild_996004653

Checkpoint ≫ Gaia Embedded Versionr81.10.17 Updatebuild_996004721

Checkpoint ≫ Gaia Embedded Versionr81.10.17 Updatebuild_996004892

Checkpoint ≫ Gaia Embedded Version >= r80.20.00 < r82.00.10

   Checkpoint ≫ Quantum Spark 1535 Version-
   Checkpoint ≫ Quantum Spark 1555 Version-
   Checkpoint ≫ Quantum Spark 1575 Version-
   Checkpoint ≫ Quantum Spark 1575r Version-
   Checkpoint ≫ Quantum Spark 2530 Version-
   Checkpoint ≫ Quantum Spark 2550 Version-
   Checkpoint ≫ Quantum Spark 2560 Version-
   Checkpoint ≫ Quantum Spark 2570 Version-
   Checkpoint ≫ Quantum Spark 2580 Version-
   Checkpoint ≫ Quantum Spark 2590 Version-

Checkpoint ≫ Gaia Embedded Versionr82.00.10 Update-

Checkpoint ≫ Gaia Embedded Versionr82.00.10 Updatebuild_998001559

Checkpoint ≫ Gaia Embedded Versionr82.00.10 Updatebuild_998001562

Checkpoint ≫ Gaia Embedded Versionr82.00.10 Updatebuild_998002110

Checkpoint ≫ Gaia Embedded Versionr82.00.10 Updatebuild_998002112

Checkpoint ≫ Gaia Embedded Versionr82.00.10 Updatebuild_998002133

Checkpoint ≫ Gaia Embedded Versionr82.00.10 Updatebuild_998002203

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

08.06.2026: CISA Known Exploited Vulnerabilities (KEV) Catalog

Check Point Security Gateway Improper Authentication Vulnerability

Schwachstelle

Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Beschreibung

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen

08.06.2026:

https://www.cert.at/de/warnungen/2026/6/angriffe-gegen-checkpoint-vpn-losungen-hotfix-verfugbar

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	70.1%	0.993

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.3	3.9	4.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.