Veille CVE
CVE-2026-50751
9.3 Critique Exploitée activement Utilisée par des rançongicielsCatalogue CISA KEV — Check Point Security Gateway Improper Authentication Vulnerability
Ajoutée le 08/06/2026 · Échéance de correction (agences US) : 11/06/2026
Action requise : Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 9.3 Critique | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N |
Faiblesses (CWE)
Références
- https://support.checkpoint.com/results/sk/sk185033 MitigationPatchVendor Advisory
- https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/ Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-50751 US Government Resource