Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-08 14:17 UTC
  • Importiert: 2026-06-15 18:32 UTC
  • CVSS: 9.3
  • Quelle-ID: thn_global
  • uid_hash: f495e0251930177ddd9722b2f26d4fe409ac2f109721d41e27f0441669c14bd9
The Hacker News

Inhalt

Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the deprecated IKEv1 key exchange protocol.

The vulnerability, tracked as CVE-2026-50751 (CVSS score: 9.3), is a case of a logic flow weakness in certificate validation that allows an unauthenticated remote attacker to bypass user

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-50751

CRITICAL

9.3

CRITICAL

9.3

0.85338

0.99718

2026-06-08

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste