Evidence dossier

CVE-2026-50751

User Authentication Bypass in VPN Remote Access and Mobile Access

80.0–95.0Priority evidence range

As known Jul 19, 2026, 5:00 AM UTCgen-56ccdaf9

Normalized restatement

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

State: PUBLISHED
Published: Jun 8, 2026
Updated: Jun 10, 2026
Evidence coverage: 85%

CISA KEVCatalog member

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

FIRST EPSS70.10%

2026-07-18 · v2026.06.15 · percentile 99.3%

Source stateNo scored conflict

Distinct CVSS assessments remain side by side; none are averaged.

Source comparison

Who said what

checkpointoriginal assertion

container

User Authentication Bypass in VPN Remote Access and Mobile Access

Jul 19, 2026Original evidence ↗

CISA-ADPindependent enrichment

container

CISA ADP Vulnrichment

Jul 19, 2026Original evidence ↗

CISA KEVoriginal assertion

observed_exploitation

Check Point Security Gateway Improper Authentication Vulnerability

Jul 19, 2026Original evidence ↗

FIRST EPSSoriginal assertion

model_probability

Probability 0.700990000000; percentile 0.993040000000

Jul 19, 2026Original evidence ↗

Applicability

Cited product scope

Trace impact →

checkpointQuantum Security Gateway

[{"status": "affected", "version": "R82.10 with Jumbo Hotfix Take 19 or below"}, {"status": "affected", "version": "R82 with Jumbo Hotfix Take 103 or below"}, {"status": "affected", "version": "R81.20 with Jumbo Hotfix Take 141 or below"}, {"status": "affected", "version": "R81.10, R81, and R80.40"}]

unknown

checkpointSpark Firewalls

[{"status": "affected", "version": "R80.20.X, R81.10.X, and R82.00.X"}]unknown

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_1530:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_1535:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_1550:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_1555:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_1570:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_1570r:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_1575:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_1575r:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_1590:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_1595r:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_1600:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_1800:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_1900:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_2000:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_2530:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_2550:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_2560:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_2570:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_2580:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:checkpoint:quantum_spark_2590:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:*; start including r80.20.00; end excluding r81.10.17supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:*; start including r80.20.00; end excluding r82.00.10supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:-:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004508:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004620:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004653:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004721:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004892:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:-:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001559:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001562:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002110:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002112:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002133:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002203:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:*:*:*:*:*:*:*:*; start including r80.40; end excluding r81.20supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:-:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_10:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_101:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_103:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_105:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_111:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_113:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_115:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_118:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_119:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_120:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_122:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_126:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_127:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_14:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_141:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_24:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_26:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_38:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_41:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_43:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_45:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_53:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_54:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_65:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_70:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_76:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_79:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_8:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_84:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_89:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_90:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_92:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_96:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_98:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r81.20:take_99:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:-:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82.10:-:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82.10:take_19:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82.10:take_6:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_10:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_103:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_12:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_14:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_18:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_19:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_25:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_33:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_34:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_36:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_39:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_41:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_43:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_44:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_60:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_73:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:checkpoint:gaia_os:r82:take_91:*:*:*:*:*:*supported

Assessments

CVSS by origin

9.3

134c704f-9b21-4f2e-91b3-4a467353bcc0CVSS 3.1 · role SecondaryCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

9.3

CISA-ADPCVSS 3.1 · role unknownCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Limitations and unknowns

KEV membership is authoritative for the catalog, not proof of exposure in any environment.
EPSS is a dated model probability and not an individual-environment prediction.
Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
NVD-carried upstream facts remain derivative and are not independent corroboration.
Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
Factor D is unknown in Public Core because no accepted canonical mapping-obligation ledger is present.
Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.