CVE-2026-50751
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
Actively exploited
- In the CISA exploited-vulnerabilities catalogue since Jun 8, 2026
- US federal agencies must remediate it by Jun 11, 2026 (BOD 22-01)
- Attacked 1 day before the vulnerability was made public
- Confirmed by sensors, not only by reports
- Used in ransomware campaigns
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Source: CISA KEV · Oct 28, 2026 Oct 26, 2026 Oct 23, 2026 Oct 22, 2026 Oct 8, 2026 Oct 7, 2026
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:NAffected products
| Vendors | Product | Versions |
|---|---|---|
| checkpoint | gaia os | < r81.20 |
| checkpoint | gaia embedded | < r81.10.17 |
| checkpoint | quantum spark 1530 | - |
| checkpoint | quantum spark 1550 | - |
| checkpoint | quantum spark 1570 | - |
| checkpoint | quantum spark 1570r | - |
| checkpoint | quantum spark 1590 | - |
| checkpoint | quantum spark 1595r | - |
| checkpoint | quantum spark 1600 | - |
| checkpoint | quantum spark 1800 | - |
| checkpoint | quantum spark 1900 | - |
| checkpoint | quantum spark 2000 | - |
| checkpoint | quantum spark 1535 | - |
| checkpoint | quantum spark 1555 | - |
| checkpoint | quantum spark 1575 | - |
| checkpoint | quantum spark 1575r | - |
| checkpoint | quantum spark 2530 | - |
| checkpoint | quantum spark 2550 | - |
| checkpoint | quantum spark 2560 | - |
| checkpoint | quantum spark 2570 | - |
| checkpoint | quantum spark 2580 | - |
| checkpoint | quantum spark 2590 | - |
Related articles
Qilin Case Crosses Borders as Germany Takes Custody of Russian Suspect
Reported transfer of suspected Qilin member from Japan to Germany over alleged logistics attack, with context on RaaS model and claimed incidents.
Check Point Patches Two Critical VPN Certificate Flaws Allowing Unauthenticated RCE
Check Point fixes two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, with CVSS 9.8, enabling unauthenticated RCE on Security Gateways and Management.
This product uses the NVD API but is not endorsed or certified by the NVD.