CVE-2026-50751Used in ransomware
CP
Check Point Security Gateway
Check Point Security Gateway Improper Authentication Vulnerability
What it is
Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-
- support.checkpoint.com/results/sk/sk185033?_gl=1*1wqeqhc*_gcl_au*MTI1MzE5MjI2LjE3ODA5MzQ1N
- nvd.nist.gov/vuln/detail/CVE-2026-50751
Description and required action as published by CISA. Full record at NVD.
Other Check Point entries on the list
- Multiple Products Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability CVE-2026-123039 · Nov 13, 2026
- Multiple Products Check Point Multiple Products Path Traversal Vulnerability CVE-2026-93616 · Sep 22, 2026
- Multiple Products Check Point Multiple Products Improper Certificate Validation Vulnerability CVE-2026-85102 · Sep 22, 2026
- SmartConsole Check Point SmartConsole Improper Authentication Vulnerability CVE-2026-16232 · Jul 22, 2026
- Quantum Security Gateways Check Point Quantum Security Gateways Information Disclosure Vulnerability CVE-2024-24919 · May 30, 2024