CVE-2026-50752: fallo de gravedad alta en checkpoint Quantum Security Gateway
Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1
Publicada el · Actualizada el
43Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck.
ssvc Actcvss 7.4epss 0.3%
de la publicación al arma
Publicada en NVD8 jun
VulnCheck+100d
probabilidad de explotación
0.3%top 84% de las CVE
explotación observada
síVulnCheck
A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVEs relacionadas — checkpoint Quantum Security Gateway
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-85102CRITICALImproper Certificate Validation in Quantum Security GatewayEPSS 7.5%KEVCVE-2026-50751CRITICALUser Authentication Bypass in VPN Remote Access and Mobile AccessEPSS 6.4%KEVCVE-2026-85103CRITICALHeap-based Buffer Overflow in VPN Certificate ASN.1 DecodingEPSS 3.7%CVE-2026-48133HIGHIdentity Awareness Captive Portal - Unauthenticated Local File InclusionEPSS 0.5%CVE-2026-48132HIGHVPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDPEPSS 0.4%CVE-2026-48131HIGHVPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number ZeroEPSS 0.4%