/Vulnerability Library

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

CVE-2026-50751
Verified

Description

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecated IKEv1.

Severity

Critical

CVSS Score

10

Exploit Probability

85%

Affected Product

quantum_security_gateway

Published Date

June 12, 2026

Template Author

watchtowr, dhiyaneshdk

CVE-2026-50751.yaml
10.0Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CVE ID:
cve-2026-50751
CWE ID:
cwe-287, cwe-295

References

https://labs.watchtowr.com/marking-your-own-homework-check-point-remote-access-vpn-ikev1-authentication-bypass-cve-2026-50751/https://support.checkpoint.com/results/sk/sk185033https://github.com/watchtowrlabs/watchTowr-vs-Check-Point-CVE-2026-50751

Remediation Steps

Apply Check Point hotfix sk185033 which restores the certificate signature verification in verifyMessagePhase1.