CVE-2026-50751
A flaw in Check Point Gaia OS’s certificate validation during IKEv1 key exchange lets an attacker connect to the VPN without a password. The weakness is a logic error that bypasses user authentication. It can be exploited remotely and is considered critical.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Check Point Gaia OS, including all r81.20 releases.
Real-world impact
An attacker can establish a VPN connection to the network without needing a valid user password, effectively gaining remote access to internal resources.
Why this severity
The CVSS score of 9.3 reflects that the vulnerability allows remote unauthenticated attackers to bypass authentication and gain full access, with a low effort required and a high impact on confidentiality.
What to do about it
- 01Apply the vendor-provided mitigations as described in Check Point's advisory for CVE-2026-50751.
- 02Follow BOD 22-01 guidance for cloud services if applicable.
CISA KEV required action
Timeline
- Jun 8, 2026 · Jun 8, 2026Confirmed exploited (CISA KEV)CISA added it to the Known Exploited Vulnerabilities catalog — attackers are using it in the wild.
- Jun 8, 2026 · Jun 8, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jun 11, 2026 · Jun 11, 2026CISA remediation deadlineFederal agencies are required to remediate by this date.
- Jul 23, 2026 · 12d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
- Aug 4, 2026 · 55m agoAdvisory updatedThe NVD record was last revised.
How it’s attacked
References & advisories
- support.checkpoint.com/results/sk/sk185033mitigationpatchvendor advisory
- blog.checkpoint.com/security/check-point-releas…vendor advisory
- cisa.gov/known-exploited-vulnerabili…us government resource