PT-2026-47276 · Check Point · Check Point Vpn

Published 2026-06-08 · Updated 2026-06-08 · CVE-2026-50751

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Check Point VPN (affected versions not specified)

Description A logic flow weakness exists in the certificate validation for Remote Access and Mobile Access within the deprecated IKEv1 key exchange. This allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password. This issue has been exploited by a Qilin ransomware affiliate.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-50751

Affected Products

Check Point Vpn

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-50751 · Security Note
• https://support.checkpoint.com/results/sk/sk185033 · Note
• https://twitter.com/shah_sheikh/status/2063961313131577444 · Twitter Post
• https://twitter.com/helpnetsecurity/status/2063960900063662351 · Twitter Post
• https://twitter.com/CVEnew/status/2063958156967899390 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2063967391722217717 · Twitter Post
• https://twitter.com/the_yellow_fall/status/2063965029318439163 · Twitter Post