CVE-2026-50752: high-severity vulnerability in checkpoint Quantum Security Gateway
Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1
Published · Updated
43Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Actcvss 7.4epss 0.3%
from disclosure to weapon
Published on NVDJun 8
VulnCheck+100d
exploitation probability
0.3%top 84% of all CVEs
observed exploitation
yesVulnCheck
A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Related CVEs — checkpoint Quantum Security Gateway
In the same product, most dangerous first.
CVE-2026-85102CRITICALImproper Certificate Validation in Quantum Security GatewayEPSS 7.5%KEVCVE-2026-50751CRITICALUser Authentication Bypass in VPN Remote Access and Mobile AccessEPSS 6.4%KEVCVE-2026-85103CRITICALHeap-based Buffer Overflow in VPN Certificate ASN.1 DecodingEPSS 3.7%CVE-2026-48133HIGHIdentity Awareness Captive Portal - Unauthenticated Local File InclusionEPSS 0.5%CVE-2026-48132HIGHVPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDPEPSS 0.4%CVE-2026-48131HIGHVPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number ZeroEPSS 0.4%