CRITICALCVSS 9.3Actively exploited · CISA KEV since 2026-06-08Vulnerability

CVE-2026-50751

Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Properties

Euvd product
Spark Firewalls, Quantum Security Gateway
Vulnerability name
Check Point Security Gateway Improper Authentication Vulnerability
First seen
2026-08-04T03:56:11+00:00
Cvss score
9.3
Epss score
0.85338
Last seen
2026-10-19T12:00:27+00:00
Due date
2026-06-11
Euvd assigner
checkpoint
Retrieved at
2026-10-21T01:24:49+00:00
Exploited euvd since
2026-06-08T00:00:00+00:00
Src batch id
epss_history-20261020T103617Z-728ddd
Source url
https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
Date added
2026-06-08
Score
9.3
Euvd base score version
3.1
Fetched at
2026-10-20T10:36:20+00:00
Euvd vendor
checkpoint
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
In Signal since
initial import (Sep 2026)
Euvd base score
9.3

Related Entities (97 · showing 25)

AFFECTS_PRODUCT (92 · showing 20)

→[Product]cpe:2.3:o:checkpoint:gaia_os:r81.20:take_103:*:*:*:*:*:*
→[Product]cpe:2.3:h:checkpoint:quantum_spark_1535:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:checkpoint:gaia_os:r82:take_44:*:*:*:*:*:*
→[Product]cpe:2.3:o:checkpoint:gaia_os:r82:take_43:*:*:*:*:*:*
→[Product]cpe:2.3:h:checkpoint:quantum_spark_1575:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:checkpoint:gaia_os:r82:take_41:*:*:*:*:*:*
→[Product]cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002110:*:*:*:*:*:*
→[Product]cpe:2.3:h:checkpoint:quantum_spark_2560:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004620:*:*:*:*:*:*
→[Product]cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001559:*:*:*:*:*:*
→[Product]cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001562:*:*:*:*:*:*
→[Product]cpe:2.3:h:checkpoint:quantum_spark_2000:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004892:*:*:*:*:*:*
→[Product]cpe:2.3:h:checkpoint:quantum_spark_1570:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:checkpoint:quantum_spark_1590:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:checkpoint:gaia_os:r82.10:-:*:*:*:*:*:*
→[Product]cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004653:*:*:*:*:*:*
→[Product]cpe:2.3:h:checkpoint:quantum_spark_1555:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:checkpoint:gaia_os:r82:take_36:*:*:*:*:*:*
→[Product]cpe:2.3:o:checkpoint:gaia_os:r82.10:take_6:*:*:*:*:*:*

MENTIONED_IN (2)

→[Campaign]Active Exploitation of Check Point VPN Authentication Bypass (CVE-2026-50751)
→[Campaign]Security Advisory - Action Required - July 2026 Security Update

DESCRIBES (1)

←[KEVEntry]Check Point Security Gateway Improper Authentication Vulnerability

HAS_WEAKNESS (1)

→[Weakness]Improper Authentication

INVOLVES (1)

←[Signal]kev_added · 2026-06-08

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-50751 (CVSS 9.3) — Ninja Signal Threat Intelligence | Ninja Signal