Vulnerabilities

Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups

Organizations still running deprecated IKEv1 VPN protocols face immediate password bypass risk from actively exploited Check Point infrastructure.

Summary written by editorial AI · Source link below

Filed by THN (Feedburner)8 June 20261 min readCVE-2026-50751Read at source ↗

CVSS9.3criticalCVE-2026-50751

Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the deprecated IKEv1 key exchange protocol.

The vulnerability, tracked as CVE-2026-50751 (CVSS score: 9.3), is a case of a logic flow weakness in certificate validation that allows an unauthenticated remote attacker to bypass user

Continue at the source

Read the full report at THN (Feedburner)

External link — opens at THN (Feedburner) in a new tab.

Continue with

More from the Vulnerabilities Desk