CVE-2026-50751 Checkpoint Quantum Security Gateway
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
- CVSS
- 9.3 Critical
- EPSS
- 85%
- Percentile
- 100
- Published
- 2026-06-08
- Force
- 11 of 12
- Public PoC
- 8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
On CISA’s exploited list
Check Point Security Gateway Improper Authentication Vulnerability
- Added
- 2026-06-08
- Federal patch deadline
- 2026-06-11
- Ransomware use
- known