CVE-2026-50751 is a certificate-validation logic flaw affecting Remote Access and Mobile Access on Check Point Quantum Security Gateway and Spark Firewalls when deprecated IKEv1 key exchange is used. An unauthenticated remote attacker can establish a VPN connection without a valid user password. The issue does not apply unconditionally to every VPN configuration.
Vulnerability Overview and Scope of Impact
Check Point's CNA rates it CVSS v3.1 9.3 CRITICAL. Affected releases include R82.10 JHF Take 19 or below, R82 Take 103 or below, R81.20 Take 141 or below, R81.10/R81/R80.40, and Spark R80.20.X/R81.10.X/R82.00.X.
Specific Impacts and Attack Scenarios
Successful exploitation can establish a Remote Access VPN connection without a valid user password and reach internal resources allowed by VPN policy. The public CNA does not identify a ransomware group, first-observed date, or post-compromise actions, so this article does not assert them. Review VPN logs and subsequent internal access for evidence of misuse.
Immediate Actions for Engineers
Use official article sk185033, replacing the incorrect sk182333 reference, and apply the hotfix listed for the exact product and Jumbo Hotfix take. Determine whether IKEv1 Remote/Mobile Access is enabled and disable it if unnecessary. Review VPN logs, added users, source addresses, and subsequent internal access.
📦