Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups

A critical flaw in Check Point's VPN solution is being actively exploited by attackers to bypass passwords in setups using the outdated IKEv1 protocol. The vulnerability, identified as CVE-2026-50751 with a CVSS score of 9.3, stems from a logic flow weakness in certificate validation, enabling unauthenticated remote attackers to gain unauthorized access¹. This high-severity issue affects Remote Access VPN and Mobile Access deployments configured to use IKEv1, a protocol that has been largely deprecated in favor of more secure alternatives. As a result, organizations using affected Check Point products are at risk of compromise. The active exploitation of this vulnerability expands the attack surface, making it essential for practitioners to prioritize mitigation based on their exposure and evidence of exploitation. So what matters most to security teams is promptly assessing their exposure to CVE-2026-50751 and taking corrective action to prevent potential breaches.