Critical Check Point VPN Flaw (CVE‑2026‑50751) Enables Password Bypass in IKEv1 Deployments
What It Is – Check Point disclosed a logic‑flow weakness in the certificate‑validation routine of its Remote Access VPN and Mobile Access solutions when they are configured to use the deprecated IKEv1 key‑exchange protocol. The flaw allows an unauthenticated remote actor to bypass the user’s password and gain full VPN access.
Exploitability – Active exploitation has been observed in the wild. A proof‑of‑concept exploit is publicly available, and the vulnerability carries a CVSS 3.1 base score of 9.3 (Critical).
Affected Products – Check Point Remote Access VPN, Check Point Mobile Access, and any third‑party appliances that embed the Check Point IKEv1 stack. All deployments that still rely on IKEv1 are at risk.
TPRM Impact – Organizations that outsource network connectivity or remote‑work capabilities to a Check Point‑based VPN provider inherit a direct pathway for credential‑free intrusion, potentially exposing internal systems, data, and downstream services.
Recommended Actions –
- Immediately disable IKEv1 and migrate to IKEv2 or an alternative, supported key‑exchange protocol.
- Apply the latest Check Point security patches (released 2026‑06‑05) to all VPN gateways.
- Conduct a rapid inventory of all remote‑access endpoints that use Check Point VPN and verify their configuration.
- Review and tighten network segmentation to limit lateral movement from compromised VPN sessions.
- Notify affected business units and update third‑party risk registers accordingly.
Source: The Hacker News