Vulnerability intelligence
CVE-2026-50752
Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1
A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.
CVSS Score
7.4
High
EPSS — Exploit Probability
0.3%
Riskier than 17% of all CVEs · checked 2026-10-24
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Unconfirmed
Vendor fix published
No linked coverage yet. CyberSIXT tracks this CVE and coverage will appear here. Follow via RSS.