CVE-2026-50751

Опубликовано: 08 июн. 2026

Источник: nvd

CVSS3: 9.3

EPSS Высокий

Описание

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Ссылки

https://support.checkpoint.com/results/sk/sk185033
Mitigation
Patch
Vendor Advisory
https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-50751
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:checkpoint:gaia_os:*:*:*:*:*:*:*:*

Версия от r80.40 (включая) до r81.20 (исключая)

cpe:2.3:o:checkpoint:gaia_os:r81.20:-:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_10:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_101:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_103:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_105:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_111:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_113:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_115:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_118:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_119:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_120:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_122:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_126:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_127:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_14:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_141:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_24:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_26:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_38:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_41:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_43:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_45:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_53:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_54:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_65:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_70:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_76:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_79:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_8:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_84:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_89:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_90:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_92:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_96:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_98:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_99:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:-:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_10:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_103:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_12:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_14:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_18:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_19:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_25:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_33:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_34:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_36:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_39:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_41:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_43:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_44:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_60:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_73:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82:take_91:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82.10:-:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82.10:take_19:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_os:r82.10:take_6:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:*

Версия от r80.20.00 (включая) до r81.10.17 (исключая)

cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:-:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004508:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004620:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004653:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004721:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004892:*:*:*:*:*:*

Одно из

cpe:2.3:h:checkpoint:quantum_spark_1530:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_1550:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_1570:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_1570r:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_1590:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_1595r:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_1600:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_1800:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_1900:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_2000:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

Одно из

cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:*

Версия от r80.20.00 (включая) до r82.00.10 (исключая)

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:-:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001559:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001562:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002110:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002112:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002133:*:*:*:*:*:*

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002203:*:*:*:*:*:*

Одно из

cpe:2.3:h:checkpoint:quantum_spark_1535:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_1555:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_1575:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_1575r:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_2530:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_2550:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_2560:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_2570:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_2580:-:*:*:*:*:*:*:*

cpe:2.3:h:checkpoint:quantum_spark_2590:-:*:*:*:*:*:*:*

EPSS

Процентиль: 100%

0.82554

Высокий

9.3 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

GHSA-jqxh-x9f5-wcgw

CVSS3: 9.3

github

около 2 месяцев назад

BDU:2026-07962

CVSS3: 9.3

fstec

около 2 месяцев назад

Уязвимость реализации протокола Internet Key Exchange (IKEv1) программных средств удаленного доступа Check Point Remote Access VPN, Check Point Mobile Access/SSL VPN и межсетевых экранов Check Point Spark, позволяющая нарушителю обойти существующие ограничения безопасности и установить VPN-соединение

EPSS

Процентиль: 100%

0.82554

Высокий

9.3 Critical

CVSS3

Дефекты

CWE-287