Authentication bypass in Check Point Security Gateway (CVE-2026-50751) — VPN access without a password, CVSS 9.3

1The Check Point Security Gateway flaw

CVE-2026-50751 is an improper-authentication vulnerability (CWE-287) in Check Point Security Gateway (Check Point's firewall / VPN gateway products). It was added to CISA's KEV catalog on June 8, 2026.

2What happens in the IKEv1 key exchange

Per NVD, the vulnerability is in IKEv1 key exchange, and an unauthenticated remote attacker can bypass user authentication and establish a remote-access VPN connection without a valid user password. IKE (Internet Key Exchange) is the key-exchange protocol for IPsec VPNs; bypassing authentication here means impersonating a legitimate user to enter the internal network.

3A device that sits at the boundary

Security gateways / VPN devices sit at the boundary between the internal network and the outside and are internet-exposed. Breaking through one without authentication hands an attacker an entry point for internal intrusion. Authentication bypasses on perimeter-defense products have repeatedly been exploited as the initial access vector in ransomware and state-linked attacks, so priority is high.

4Authentication bypassed at the key exchange

A VPN exists to let only legitimate users into the internal network. This vulnerability succeeds a step before that entrance, at the key exchange.

1. 1Reach the IKEv1 key exchangeA VPN gateway is exposed to the internet
2. 2Bypass user authenticationIt passes without a valid user password
3. 3Establish a remote-access VPNEnter the internal network as a legitimate user
4. 4Become the way inPast the boundary lies the internal network

IKE, Internet Key Exchange, is the key exchange protocol for IPsec VPNs, and bypassing authentication there means entering the internal network while impersonating a legitimate user. Authentication bypass in perimeter products has been used repeatedly as the initial access route in ransomware and state-linked attacks, which keeps the priority high. Inspecting VPN connection logs is also recommended.