CVE-2026-50751
Check Point Security Gateway Improper Authentication Vulnerability
What is affected
| Vendor | Check Point |
|---|---|
| Product | Security Gateway |
| Weakness | CWE-287 |
The vulnerability
Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
US federal civilian agencies were required to act by 11 June 2026 under BOD 22-01. The deadline is a compliance date, not a measure of severity — it says nothing about how dangerous the flaw is to anyone else.
Ransomware
CISA records this vulnerability as having been used in ransomware campaigns. That is a confirmed observation, not an assessment of likelihood.
Where this comes from
Every field on this page is taken from the CISA Known Exploited Vulnerabilities catalog, last synced 14 Nov 2026, 03:28. Nothing here is our own assessment. For the technical scoring, see the NVD record below.
More from Check Point
Check Point Multiple Products
Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability
CVE-2026-93616Check Point Multiple Products
Check Point Multiple Products Path Traversal Vulnerability
CVE-2026-85102Check Point Multiple Products
Check Point Multiple Products Improper Certificate Validation Vulnerability
CVE-2026-16232Check Point SmartConsole
Check Point SmartConsole Improper Authentication Vulnerability