Exploitation active confirmée

Ajoutée au catalogue CISA KEV le 08/06/2026, correctif exigé avant le 11/06/2026 pour les agences fédérales américaines.

Action requise : Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description officielle (NVD)

Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Preuves de concept publiques (8)

Dépôts tiers non vérifiés, parfois piégés. Ne les exécutez jamais en production : uniquement dans un environnement de test isolé.

watchtowrlabs/watchTowr-vs-Check-Point-CVE-2026-50751 · ★ 6 · 10/06/2026
0xBlackash/CVE-2026-50751 · ★ 2 · 08/06/2026
CVE-2026-50751
WadesWeaponShed/CVE-2026-50751-Mitigation-Scripts · ★ 1 · 08/06/2026
Mitigation scripts for CVE-2026-50751
fevar54/CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit · ★ 1 · 10/06/2026
PoC de CVE-2026-50751: bypass de autenticacion IKEv1 en Check Point Remote/Mobile Access.
WadesWeaponShed/CheckPoint-CVE-Webscanner · ★ 1 · 18/06/2026
A web version of the bash scripts wrote for Check Point CVE-2026-50751 and CVE-2026-50752. This uses a local server to scan and make changes using Check Point Web API
uLl0a/CVE-2026-50751 · ★ 1 · 13/09/2026
Bypass de autenticación por certificado en la VPN Remote-Access de Check Point (IKEv1).
fernstedt/CVE-2026-50751 · ★ 0 · 10/06/2026
CVE-2026-50751 Check Point IKEv1 vulnerability scanner
e4zyy/Project-CVE-2026-50751 · ★ 0 · 28/08/2026
IKEv1 VPN scanners, attempts a Check Point authentication-bypass exploit, and includes internal network scanning and reverse-shell features.