IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
9.3Kritik KEV Fidye yazılımında kullanılıyor

CVE-2026-50751User Authentication Bypass in VPN Remote Access and Mobile Access

checkpoint Quantum Security Gateway; checkpoint Spark Firewalls Yayım: (5 ay önce)

Aktif olarak istismar ediliyor — Check Point Security Gateway Improper Authentication Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 08.06.2026 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 11.06.2026.

Gerekli işlem: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/ ; https://support.checkpoint.com/results/sk/sk185033?_gl=1*1wqeqhc*_gcl_au*MTI1MzE5MjI2LjE3ODA5MzQ1NTM. ; https://nvd.nist.gov/vuln/detail/CVE-2026-50751

Açıklama

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Zayıflık türü (CWE): CWE-287

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
checkpoint gaia embedded r80.20.00 – < r81.10.17
checkpoint gaia os r80.40 – < r81.20
checkpoint Quantum Security Gateway R82.10 with Jumbo Hotfix Take 19 or below, R82 with Jumbo Hotfix Take 103 or below, R81.20 with Jumbo Hotfix Take 141 or below, R81.10, R81, and R80.40
checkpoint Spark Firewalls R80.20.X, R81.10.X, and R82.00.X

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (60)
  • cpe:2.3:o:checkpoint:gaia_os:*:*:*:*:*:*:*:* ≥ r80.40 < r81.20
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:-:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_10:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_101:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_103:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_105:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_111:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_113:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_115:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_118:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_119:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_120:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_122:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_126:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_127:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_14:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_141:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_24:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_26:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_38:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_41:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_43:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_45:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_53:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_54:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_65:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_70:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_76:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_79:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_8:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_84:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_89:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_90:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_92:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_96:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_98:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r81.20:take_99:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:-:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_10:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_103:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_12:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_14:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_18:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_19:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_25:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_33:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_34:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_36:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_39:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_41:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_43:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_44:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_60:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_73:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82:take_91:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82.10:-:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82.10:take_19:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_os:r82.10:take_6:*:*:*:*:*:*
  • cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:* ≥ r80.20.00 < r81.10.17
  • cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:-:*:*:*:*:*:*

Aynı üründe son açıklar — Check Point

9.8Kritik
CVE-2026-85103

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

4.3%EPSS