Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2026-50752

Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
checkpoint

Description

A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

checkpoint Quantum Security Gateway

  • R82.10 with Jumbo Hotfix Take 19 or belowaffected
  • R82 with Jumbo Hotfix Take 103 or belowaffected
  • R81.20 with Jumbo Hotfix Take 141 or belowaffected
  • R81.10, R81, and R80.40affected

checkpoint Spark Firewalls

  • R80.20.X, R81.10.X, and R82.00.Xaffected

References