CVE-2026-50752 — Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1

Description (CNA)

A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.

Affected (CNA)

Vendor / product	Versions
checkpoint / Quantum Security Gateway	affected R82.10 with Jumbo Hotfix Take 19 or below; affected R82 with Jumbo Hotfix Take 103 or below; affected R81.20 with Jumbo Hotfix Take 141 or below; affected R81.10, R81, and R80.40
checkpoint / Spark Firewalls	affected R80.20.X, R81.10.X, and R82.00.X

CWE

CWE-295

References

https://support.checkpoint.com/results/sk/sk185035

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.