Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-50751

User Authentication Bypass in VPN Remote Access and Mobile Access

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

CVSS 3.1 · 9.3 Critical EPSS 85.3% KEV · Listed
Vendors
Checkpoint
Products
Gaia Embedded Gaia Os Quantum Security Gateway and 21 more
CVE-2026-50752

Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1

A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.

CVSS 3.1 · 7.4 High EPSS 4.7% KEV · Not listed
Vendors
Checkpoint
Products
Quantum Security Gateway Spark Firewalls