by Kastro
Paper/Archive/CVE-2026-50751

CVE-2026-50751

checkpoint Quantum Security Gateway — User Authentication Bypass in VPN Remote Access and Mobile Access

KEV · due 11 Junransomware useEPSS 85%public exploitSSVC actCVSS 9.3
critical.is priorityof 100
98
CVSS 9.3 (ADP)9.3 / 10 × 3027.9In CISA KEV+3030.0EPSS percentile 99.7.997 × 2019.9Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Affected

ProductAffectedFixed inSource
Quantum Security GatewayR82.10 with Jumbo Hotfix Take 19 or below–CNA
Quantum Security GatewayR82 with Jumbo Hotfix Take 103 or below–CNA
Quantum Security GatewayR81.20 with Jumbo Hotfix Take 141 or below–CNA
Quantum Security GatewayR81.10, R81, and R80.40–CNA
Spark FirewallsR80.20.X, R81.10.X, and R82.00.X–CNA

Scores by source

CISA ADP9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refsupport.checkpoint.com/results/sk/sk185033advisoryblog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocolrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-50751kevcisa.gov/known-exploited-vulnerabilities-catalog