CVE-2026-50752 — Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1

Back Back to CVE browser

HIGH

Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1

Published Jun 8, 2026

7.4

HIGH

CVSS 3.1

EPSS 0.26%

Description

A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.

Affected products

Vendor Check Point Product Quantum Security Gateway Default
n/a
- Version
  R81.10, R81, and R80.40
  Status
  affected
  Constraints
  -
- Version
  R81.20 with Jumbo Hotfix Take 141 or below
  Status
  affected
  Constraints
  -
- Version
  R82 with Jumbo Hotfix Take 103 or below
  Status
  affected
  Constraints
  -
- Version
  R82.10 with Jumbo Hotfix Take 19 or below
  Status
  affected
  Constraints
  -
Vendor Check Point Product Spark Firewalls Default
n/a
- Version
  R80.20.X, R81.10.X, and R82.00.X
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Check Point

Quantum Security Gateway

n/a

Version	Status	Constraints
R81.10, R81, and R80.40	affected	-
R81.20 with Jumbo Hotfix Take 141 or below	affected	-
R82 with Jumbo Hotfix Take 103 or below	affected	-
R82.10 with Jumbo Hotfix Take 19 or below	affected	-

Check Point

Spark Firewalls

n/a

Version	Status	Constraints
R80.20.X, R81.10.X, and R82.00.X	affected	-

Remediation

No remediation recorded yet.

Metrics

0.26% 0.00260

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00260

Score over time

Jun–Oct 2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (4 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.26% (0.00260)	16.01th	v5 (v2026.06.15)
Sep 20, 2026	5.00% (0.05005)	91.85th	v5 (v2026.06.15)
Jun 15, 2026	4.25% (0.04249)	89.73th	v5 (v2026.06.15)
Jun 8, 2026	0.02% (0.00023)	6.81th	v4 (v2025.03.14)