Vulnerability Intelligence Report
Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1
CVE-2026-50752
A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.
No Active Exploit Signals
CVSS Base Score
7.4
HIGH
Exploitability:2.3
Impact Score:5.2
EPSS Probability:4.86%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-295 ↗CWE-295: Improper Certificate Validation.
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| checkpoint | Quantum Security Gateway | R82.10 with Jumbo Hotfix Take 19 or below (affected), R82 with Jumbo Hotfix Take 103 or below (affected), R81.20 with Jumbo Hotfix Take 141 or below (affected), R81.10, R81, and R80.40 (affected) |
| checkpoint | Spark Firewalls | R80.20.X, R81.10.X, and R82.00.X (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
4.859%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Check Point Software Ltd. · Vendor · Israel |
| Reserved | 2026-06-07T09:42:08 |
| Published | 2026-06-08T11:00:38 |
| Last Updated | 2026-06-10T13:36:24 |
Community Chatter & Buzz