← Database

CVE-2026-50751

CRITICAL CVSS: 9.3 Published: 2026-06-08 Modified: 2026-08-04

Description

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Affected Platforms

Checkpoint Quantum Spark 1590Checkpoint Quantum Spark 1800Checkpoint Quantum Spark 1555Checkpoint Quantum Spark 2560Checkpoint Quantum Spark 2530Checkpoint Quantum Spark 1600Checkpoint Gaia OsCheckpoint Quantum Spark 1575Checkpoint Quantum Spark 1570RCheckpoint Quantum Spark 1550

Weakness Type

CWE-287

References