CVE-2026-50751
critical · 9.3Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Weaknesses
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| checkpoint | gaia_os | >= r80.40, < r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r81.20 |
| checkpoint | gaia_os | r82 |
| checkpoint | gaia_os | r82 |
| checkpoint | gaia_os | r82 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2026-50751