Actively exploited · Published Jun 8, 2026 · Assigned by checkpoint
CVE-2026-50751User Authentication Bypass in VPN Remote Access and Mobile Access
Critical 9.3 Exploited Ransomware
In plain English
A critical-severity improper authentication in Quantum Security Gateway from checkpoint. Attackers are actively exploiting it in the wild (listed by CISA on June 8, 2026). It has been used in ransomware campaigns. The chance it is exploited in the next 30 days is estimated at 85.3% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Jun 11, 2026.
Official description
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| checkpoint | Quantum Security Gateway | R82.10 with Jumbo Hotfix Take 19 or belowR82 with Jumbo Hotfix Take 103 or belowR81.20 with Jumbo Hotfix Take 141 or belowR81.10, R81, and R80.40 |
| checkpoint | Spark Firewalls | R80.20.X, R81.10.X, and R82.00.X |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N