CVE-2026-50751
CRITICAL CISA KEVDescription
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
CVSS v3.1 Score
EPSS — Exploit Prediction
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
CISA Known Exploited Vulnerability
This vulnerability is actively exploited in the wild.
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_os |
| checkpoint | gaia_embedded |
| checkpoint | gaia_embedded |
| checkpoint | gaia_embedded |
| checkpoint | gaia_embedded |
| checkpoint | gaia_embedded |
| checkpoint | gaia_embedded |
| checkpoint | gaia_embedded |
| checkpoint | quantum_spark_1530 |
| checkpoint | quantum_spark_1550 |
| checkpoint | quantum_spark_1570 |
| checkpoint | quantum_spark_1570r |
| checkpoint | quantum_spark_1590 |
| checkpoint | quantum_spark_1595r |
| checkpoint | quantum_spark_1600 |
| checkpoint | quantum_spark_1800 |
| checkpoint | quantum_spark_1900 |
| checkpoint | quantum_spark_2000 |
| checkpoint | gaia_embedded |
| checkpoint | gaia_embedded |
| checkpoint | gaia_embedded |
| checkpoint | gaia_embedded |
| checkpoint | gaia_embedded |
| checkpoint | gaia_embedded |
| checkpoint | gaia_embedded |
| checkpoint | gaia_embedded |
| checkpoint | quantum_spark_1535 |
| checkpoint | quantum_spark_1555 |
| checkpoint | quantum_spark_1575 |
| checkpoint | quantum_spark_1575r |
| checkpoint | quantum_spark_2530 |
| checkpoint | quantum_spark_2550 |
| checkpoint | quantum_spark_2560 |
| checkpoint | quantum_spark_2570 |
| checkpoint | quantum_spark_2580 |
| checkpoint | quantum_spark_2590 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2026-50751? +
How severe is CVE-2026-50751? +
What products are affected by CVE-2026-50751? +
How do I check if I'm vulnerable to CVE-2026-50751? +
Related Vulnerabilities
Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unauthenticated …
OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX …
PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if cert_policy …
A flaw in Gliffy results in broken authentication through the reset functionality of the application.
MinIO is a high performance object storage. Starting in RELEASE.2024-06-06T09-36-42Z and prior to RELEASE.2025-02-28T09-55-16Z, a bug in evaluating the trust …
Scratch-Coding-Hut.github.io is the website for Coding Hut. The website as of 28 February 2025 contained a sign in with scratch …