Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-50751

User Authentication Bypass in VPN Remote Access and Mobile Access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
checkpoint

Description

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

checkpoint Quantum Security Gateway

  • R82.10 with Jumbo Hotfix Take 19 or belowaffected
  • R82 with Jumbo Hotfix Take 103 or belowaffected
  • R81.20 with Jumbo Hotfix Take 141 or belowaffected
  • R81.10, R81, and R80.40affected

checkpoint Spark Firewalls

  • R80.20.X, R81.10.X, and R82.00.Xaffected

References