CVE-2026-50751— User Authentication Bypass in VPN Remote Access and Mobile Access
Public Exploits 1
Nuclei · 1 CVE-2026-50751.yaml [template]
In-the-Wild Activity Observed github_trending · low cisa_kev · confirmed
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 5
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| checkpoint | Quantum Security Gateway | R82.10 with Jumbo Hotfix Take 19 or below | affected |
R82 with Jumbo Hotfix Take 103 or below | affected | ||
R81.20 with Jumbo Hotfix Take 141 or below | affected | ||
R81.10, R81, and R80.40 | affected | ||
| checkpoint | Spark Firewalls | R80.20.X, R81.10.X, and R82.00.X | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-50751
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
User Authentication Bypass in VPN Remote Access and Mobile Access
Source: NVD (National Vulnerability Database)
Vulnerability Description
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
认证机制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Check Point Quantum Security Gateway 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Check Point Quantum Security Gateway是以色列Check Point公司的一系列企业级安全网关设备。 Check Point Quantum Security Gateway存在授权问题漏洞，该漏洞源于已弃用的IKEv1密钥交换中证书验证逻辑流程缺陷，可能导致未经身份验证的远程攻击者绕过用户认证并建立远程访问VPN连接。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| checkpoint | Quantum Security Gateway | R82.10 with Jumbo Hotfix Take 19 or below | - | |
| checkpoint | Spark Firewalls | R80.20.X, R81.10.X, and R82.00.X | - |
II. Public POCs for CVE-2026-50751
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecated IKEv1. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-50751.yaml | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-50751
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-50751 (1)
IV. Related Vulnerabilities
Same product: Quantum Security Gateway
- CVE-2026-50752
Certificate Validation Bypass in VPN Site-to-Site Connection - CVE-2026-48135
HTTP service can incorrectly process malformed HTTP requests - CVE-2026-48134
SQL injection issue in UserCheck Portal when DLP Software Bl - CVE-2026-48133
Identity Awareness Captive Portal - Unauthenticated Local Fi - CVE-2026-48132
VPN service may restart unexpectedly when processing IKE tra
Same vendor: checkpoint
- CVE-2026-10847
Local Privilege Escalation vulnerability in Check Point Iden - CVE-2026-50752
Certificate Validation Bypass in VPN Site-to-Site Connection - CVE-2026-48136
Authenticated Administrator Role-Based Access Control Bypass - CVE-2026-48135
HTTP service can incorrectly process malformed HTTP requests - CVE-2026-48134
SQL injection issue in UserCheck Portal when DLP Software Bl
Same weakness: CWE-287
- CVE-2026-32174
Azure Bot Service Elevation of Privilege Vulnerability - CVE-2026-49454
Relyra SAML SignatureValue not cryptographically verified -> - CVE-2026-11718
googleapis/mcp-toolbox令牌验证绕过漏洞 - CVE-2026-11717
Googleapis MCP Toolbox鉴权绕过漏洞 - CVE-2026-48991
XianYuLauncher: Legacy Microsoft account OAuth sign-in flow
V. Comments for CVE-2026-50751
No comments yet