CVE-2026-50752: falha de alta gravidade em checkpoint Quantum Security Gateway
Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1
Publicada em · Atualizada em
43Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck.
ssvc Actcvss 7.4epss 0.3%
da publicação à arma
Publicada no NVD8 de jun.
VulnCheck+100d
probabilidade de exploração
0.3%top 84% das CVEs
exploração observada
simVulnCheck
A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVEs relacionadas — checkpoint Quantum Security Gateway
No mesmo produto, das mais perigosas para as menos.
CVE-2026-85102CRITICALImproper Certificate Validation in Quantum Security GatewayEPSS 7.5%KEVCVE-2026-50751CRITICALUser Authentication Bypass in VPN Remote Access and Mobile AccessEPSS 6.4%KEVCVE-2026-85103CRITICALHeap-based Buffer Overflow in VPN Certificate ASN.1 DecodingEPSS 3.7%CVE-2026-48133HIGHIdentity Awareness Captive Portal - Unauthenticated Local File InclusionEPSS 0.5%CVE-2026-48132HIGHVPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDPEPSS 0.4%CVE-2026-48131HIGHVPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number ZeroEPSS 0.4%