CYBERSIXT Signal Over Noise
All CVEs
Vulnerability intelligence

CVE-2026-50751

Check Point Security Gateway Improper Authentication Vulnerability

Check Point Security Gateway CWE-287

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

CVSS Score
9.3
Critical
EPSS — Exploit Probability
84%
Riskier than 100% of all CVEs · checked 2026-09-06
Exploitation
Confirmed in the wild
Used in ransomware campaigns
Remediation
Patch available
Federal deadline 2026-06-11
CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2026-06-11.

NVD entry Vendor patch PoC / advisory CISA KEV

42 articles across 10 outlets · first covered Jun 8, 2026 · latest Jun 15, 2026

Associated threat actors

Qilin

Coverage timeline

Related CVEs — Check Point

CVE-2026-16232KEV