CVE-2026-50751KEV · OVERDUECWE-287

Check Point Security Gateway Improper Authentication Vulnerability

Critical · published June 8, 2026

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 9.3. It is confirmed in active exploitation. It sits in the 99.7th percentile for exploit probability.

134
days past CISA
deadline
CVSS v3.1
9.3
EPSS
85%
Percentile
99.7
In the wild
Confirmed
What it is

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

The record
Technical detail
CVSS v3.1
9.3 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.85338 · 99.7th percentile
Weakness
CWE-287 · Improper Authentication
Published
2026-06-08T16:16Z
KEV added
2026-06-08 · due 2026-06-11
Affected products (73)
ProductVersionsFixed in
checkpoint/gaia_os≥ r80.40, < r81.20r81.20
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_osall versions—
checkpoint/gaia_embedded≥ r80.20.00, < r81.10.17r81.10.17
checkpoint/gaia_embeddedall versions—
checkpoint/gaia_embeddedall versions—
checkpoint/gaia_embeddedall versions—
checkpoint/gaia_embeddedall versions—
checkpoint/gaia_embeddedall versions—
checkpoint/gaia_embeddedall versions—
checkpoint/gaia_embedded≥ r80.20.00, < r82.00.10r82.00.10
checkpoint/gaia_embeddedall versions—
checkpoint/gaia_embeddedall versions—
checkpoint/gaia_embeddedall versions—
checkpoint/gaia_embeddedall versions—
checkpoint/gaia_embeddedall versions—
checkpoint/gaia_embeddedall versions—
checkpoint/gaia_embeddedall versions—
References (3)
https://support.checkpoint.com/results/sk/sk185033 · [email protected]https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/ · 134c704f-9b21-4f2e-91b3-4a467353bcc0https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-50751 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 09 OCT 03:29Z
    EPSS moved 6% → 85%
    epss
  • 25 SEP 03:26Z
    EPSS moved 84% → 6%
    epss
  • 08 JUN 11:07Z
    User Authentication Bypass in VPN Remote Access and Mobile Access
    cvelistv5
  • 08 JUN 00:00Z
    Added to CISA KEV — remediate by Jun 11
    kev