CVE-2026-50752 Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1
Man-in-the-middle attackers can bypass certificate validation in IKEv1 VPN connections, allowing interception or modification of tunnel traffic.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-50752?
CVE-2026-50752 is a high-severity vulnerability in checkpoint Quantum Security Gateway, published on 8 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.
Weakness: CWE-295
Which versions are affected by CVE-2026-50752?
How do I fix CVE-2026-50752?
No fix has been published for CVE-2026-50752 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-50752 being exploited?
There is no known exploitation of CVE-2026-50752 in the wild and no public exploit code.
Sources
Also known as GHSA-89xv-5cj4-39m4.