CVE entry · CVE-2026-50751
CVE-2026-50751: Check Point Security Gateway Improper Authentication Vulnerability
Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
- Actively exploited: added to CISA’s KEV catalog on June 8, 2026.
- Used by ransomware, according to CISA.
- Remediation deadline for US federal agencies: June 11, 2026.
Description from CISA’s KEV catalog.
What to do
- Check whether your estate includes Check Point Security Gateway, including internet-facing devices.
- Apply the vendor’s patch or mitigations (references below). Failing that, isolate the product or stop using it, as CISA requires of US federal agencies.
- An exploited vulnerability has often been used before it was fixed: look for signs of compromise, especially on internet-facing devices.
References
- Vendor advisory or reference cited by CISA (blog.checkpoint.com)
- Vendor advisory or reference cited by CISA (support.checkpoint.com)
- NVD entry (NIST)
- CISA KEV catalog