CVE-2026-50751: Check Point Security Gateway Improper Authentication Vulnerability

Added to the CISA Known Exploited Vulnerabilities catalog on 08 Jun 2026. Vendor: Check Point. Product: Security Gateway.

Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. (due 11 Jun 2026)