Summary
| Parameter | Value |
|---|---|
| CVE ID | CVE-2026-50752 |
| Alert Source | Check Point Security Advisory (sk185035) |
| CVE Publication Year | 2026 |
| Date Published | 2026-06-08 |
| Vendor | Check Point |
| Product | Quantum Security Gateway |
| CVSS Score | 7.4 (high) |
| CISA KEV | No |
| Active exploitation | No indication |
| Ransomware | Not confirmed |
Vulnerability Description
Check Point Research discovered a certificate bypass vulnerability affecting Site-to-Site VPN through the deprecated IKEv1 key exchange. It can allow an attacker to bypass certificate validation on affected Site-to-Site VPN configurations. There is currently no indication of active exploitation.
This vulnerability is fixed by the same hotfix that addresses the actively exploited CVE-2026-50751 (VPN Remote Access / Mobile Access authentication bypass).
Affected configurations — gateways are suspected vulnerable if all conditions are met:
- Products: Check Point Firewalls, Spark Firewalls
- Firewall versions: R80.40 (EOS), R81 (EOS), R81.10 (EOS), R81.20, R82, R82.10
- Spark Firewall versions: R80.20.XX (EOS), R81.10.X, R82.00.X
- Site-to-Site VPN enabled with the deprecated IKEv1 key exchange
Required Actions
Install the Check Point hotfix on all affected Security Gateways (the same hotfix addresses CVE-2026-50751 and CVE-2026-50752). Where immediate patching is not possible, disable the deprecated IKEv1 key exchange for Site-to-Site VPN and follow Check Point’s mitigation guidance in the advisory.
Who Is Affected?
This vulnerability affects Quantum Security Gateway by Check Point. Check if your Check Point or Spark Firewall runs an affected version with Site-to-Site VPN over IKEv1, and apply the hotfix.
Sources
Need help securing your systems? nFlo team offers vulnerability management and 24/7 SOC services. Contact us.
