Dashboard / CVE-2026-50751

CVE-2026-50751

CISA KEV RANSOMWARE
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

CISA Known Exploited Vulnerability

Vendor / Product Check Point — Security Gateway
Date Added 2026-06-08
Remediation Due 2026-06-11
Ransomware Use CONFIRMED
https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/ ; https://support.checkpoint.com/results/sk/sk185033?_gl=1*1wqeqhc*_gcl_au*MTI1MzE5MjI2LjE3ODA5MzQ1NTM. ; https://nvd.nist.gov/vuln/detail/CVE-2026-50751

Weakness Classification (1)

Affected Software (73)

VendorProductVersion
checkpoint gaia_embedded r80.20.00 – r81.10.17
checkpoint gaia_embedded r81.10.17
checkpoint gaia_embedded r81.10.17
checkpoint gaia_embedded r81.10.17
checkpoint gaia_embedded r81.10.17
checkpoint gaia_embedded r81.10.17
checkpoint gaia_embedded r81.10.17
checkpoint gaia_embedded r80.20.00 – r82.00.10
checkpoint gaia_embedded r82.00.10
checkpoint gaia_embedded r82.00.10
checkpoint gaia_embedded r82.00.10
checkpoint gaia_embedded r82.00.10
checkpoint gaia_embedded r82.00.10
checkpoint gaia_embedded r82.00.10
checkpoint gaia_embedded r82.00.10
checkpoint gaia_os r80.40 – r81.20
checkpoint gaia_os r81.20
checkpoint gaia_os r81.20
checkpoint gaia_os r81.20
checkpoint gaia_os r81.20
checkpoint gaia_os r81.20
checkpoint gaia_os r81.20
checkpoint gaia_os r81.20
checkpoint gaia_os r81.20
checkpoint gaia_os r81.20
checkpoint gaia_os r81.20
checkpoint gaia_os r81.20
checkpoint gaia_os r81.20
checkpoint gaia_os r81.20
checkpoint gaia_os r81.20
Showing 30 of 73 entries

References & Advisories (3)

https://support.checkpoint.com/results/sk/sk185033
Mitigation Patch Vendor Advisory

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

85.34%
Raw Score 0.853380
Percentile 99.7%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links