User Authentication Bypass in VPN Remote Access and Mobile Access
Priority CRITICAL 99Exploited in the wildCWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-287.
Summary
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
Why it matters now
Exploitation Active In CISA KEV since 2026-06-08CISA due date 2026-06-11Known ransomware use
EPSS 0.85348 99th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Check Point | Quantum Security Gateway | R82.10 with Jumbo Hotfix Take 19 or below; R82 with Jumbo Hotfix Take 103 or below; R81.20 with Jumbo Hotfix Take 141 or below; R81.10, R81, and R80.40 | — | No fix listed | CNA |
| Check Point | Spark Firewalls | R80.20.X, R81.10.X, and R82.00.X | — | No fix listed | CNA |
- Quantum Security Gateway VendorCheck Point Affected R82.10 with Jumbo Hotfix Take 19 or below; R82 with Jumbo Hotfix Take 103 or below; R81.20 with Jumbo Hotfix Take 141 or below; R81.10, R81, and R80.40 Fixed in — No fix listed CNA
- Spark Firewalls VendorCheck Point Affected R80.20.X, R81.10.X, and R82.00.X Fixed in — No fix listed CNA
CPE configurations NVD · 93
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:checkpoint:gaia_os:*:*:*:*:*:*:*:* | r80.40 to before r81.20 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:-:*:*:*:*:*:* | r81.20 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_10:*:*:*:*:*:* | r81.20 take_10 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_101:*:*:*:*:*:* | r81.20 take_101 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_103:*:*:*:*:*:* | r81.20 take_103 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_105:*:*:*:*:*:* | r81.20 take_105 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_111:*:*:*:*:*:* | r81.20 take_111 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_113:*:*:*:*:*:* | r81.20 take_113 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_115:*:*:*:*:*:* | r81.20 take_115 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_118:*:*:*:*:*:* | r81.20 take_118 | Vulnerable | Check Point |
- cpe:2.3:o:checkpoint:gaia_os:*:*:*:*:*:*:*:* Versions r80.40 to before r81.20 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:-:*:*:*:*:*:* Versions r81.20 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_10:*:*:*:*:*:* Versions r81.20 take_10 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_101:*:*:*:*:*:* Versions r81.20 take_101 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_103:*:*:*:*:*:* Versions r81.20 take_103 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_105:*:*:*:*:*:* Versions r81.20 take_105 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_111:*:*:*:*:*:* Versions r81.20 take_111 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_113:*:*:*:*:*:* Versions r81.20 take_113 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_115:*:*:*:*:*:* Versions r81.20 take_115 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_118:*:*:*:*:*:* Versions r81.20 take_118 Vulnerable ·Check Point
Show 83 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_119:*:*:*:*:*:* | r81.20 take_119 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_120:*:*:*:*:*:* | r81.20 take_120 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_122:*:*:*:*:*:* | r81.20 take_122 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_126:*:*:*:*:*:* | r81.20 take_126 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_127:*:*:*:*:*:* | r81.20 take_127 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_14:*:*:*:*:*:* | r81.20 take_14 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_141:*:*:*:*:*:* | r81.20 take_141 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_24:*:*:*:*:*:* | r81.20 take_24 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_26:*:*:*:*:*:* | r81.20 take_26 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_38:*:*:*:*:*:* | r81.20 take_38 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_41:*:*:*:*:*:* | r81.20 take_41 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_43:*:*:*:*:*:* | r81.20 take_43 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_45:*:*:*:*:*:* | r81.20 take_45 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_53:*:*:*:*:*:* | r81.20 take_53 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_54:*:*:*:*:*:* | r81.20 take_54 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_65:*:*:*:*:*:* | r81.20 take_65 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_70:*:*:*:*:*:* | r81.20 take_70 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_76:*:*:*:*:*:* | r81.20 take_76 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_79:*:*:*:*:*:* | r81.20 take_79 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_8:*:*:*:*:*:* | r81.20 take_8 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_84:*:*:*:*:*:* | r81.20 take_84 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_89:*:*:*:*:*:* | r81.20 take_89 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_90:*:*:*:*:*:* | r81.20 take_90 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_92:*:*:*:*:*:* | r81.20 take_92 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_96:*:*:*:*:*:* | r81.20 take_96 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_98:*:*:*:*:*:* | r81.20 take_98 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r81.20:take_99:*:*:*:*:*:* | r81.20 take_99 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:-:*:*:*:*:*:* | r82 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_10:*:*:*:*:*:* | r82 take_10 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_103:*:*:*:*:*:* | r82 take_103 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_12:*:*:*:*:*:* | r82 take_12 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_14:*:*:*:*:*:* | r82 take_14 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_18:*:*:*:*:*:* | r82 take_18 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_19:*:*:*:*:*:* | r82 take_19 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_25:*:*:*:*:*:* | r82 take_25 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_33:*:*:*:*:*:* | r82 take_33 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_34:*:*:*:*:*:* | r82 take_34 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_36:*:*:*:*:*:* | r82 take_36 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_39:*:*:*:*:*:* | r82 take_39 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_41:*:*:*:*:*:* | r82 take_41 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_43:*:*:*:*:*:* | r82 take_43 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_44:*:*:*:*:*:* | r82 take_44 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_60:*:*:*:*:*:* | r82 take_60 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_73:*:*:*:*:*:* | r82 take_73 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82:take_91:*:*:*:*:*:* | r82 take_91 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82.10:-:*:*:*:*:*:* | r82.10 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82.10:take_19:*:*:*:*:*:* | r82.10 take_19 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_os:r82.10:take_6:*:*:*:*:*:* | r82.10 take_6 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:* | r80.20.00 to before r81.10.17 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:-:*:*:*:*:*:* | r81.10.17 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004508:*:*:*:*:*:* | r81.10.17 build_996004508 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004620:*:*:*:*:*:* | r81.10.17 build_996004620 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004653:*:*:*:*:*:* | r81.10.17 build_996004653 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004721:*:*:*:*:*:* | r81.10.17 build_996004721 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004892:*:*:*:*:*:* | r81.10.17 build_996004892 | Vulnerable | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_1530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_1550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_1570:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_1570r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_1590:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_1595r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_1600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_1800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_1900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_2000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:* | r80.20.00 to before r82.00.10 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:-:*:*:*:*:*:* | r82.00.10 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001559:*:*:*:*:*:* | r82.00.10 build_998001559 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001562:*:*:*:*:*:* | r82.00.10 build_998001562 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002110:*:*:*:*:*:* | r82.00.10 build_998002110 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002112:*:*:*:*:*:* | r82.00.10 build_998002112 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002133:*:*:*:*:*:* | r82.00.10 build_998002133 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002203:*:*:*:*:*:* | r82.00.10 build_998002203 | Vulnerable | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_1535:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_1555:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_1575:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_1575r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_2530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_2550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_2560:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_2570:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_2580:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark_2590:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_119:*:*:*:*:*:* Versions r81.20 take_119 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_120:*:*:*:*:*:* Versions r81.20 take_120 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_122:*:*:*:*:*:* Versions r81.20 take_122 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_126:*:*:*:*:*:* Versions r81.20 take_126 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_127:*:*:*:*:*:* Versions r81.20 take_127 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_14:*:*:*:*:*:* Versions r81.20 take_14 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_141:*:*:*:*:*:* Versions r81.20 take_141 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_24:*:*:*:*:*:* Versions r81.20 take_24 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_26:*:*:*:*:*:* Versions r81.20 take_26 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_38:*:*:*:*:*:* Versions r81.20 take_38 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_41:*:*:*:*:*:* Versions r81.20 take_41 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_43:*:*:*:*:*:* Versions r81.20 take_43 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_45:*:*:*:*:*:* Versions r81.20 take_45 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_53:*:*:*:*:*:* Versions r81.20 take_53 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_54:*:*:*:*:*:* Versions r81.20 take_54 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_65:*:*:*:*:*:* Versions r81.20 take_65 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_70:*:*:*:*:*:* Versions r81.20 take_70 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_76:*:*:*:*:*:* Versions r81.20 take_76 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_79:*:*:*:*:*:* Versions r81.20 take_79 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_8:*:*:*:*:*:* Versions r81.20 take_8 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_84:*:*:*:*:*:* Versions r81.20 take_84 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_89:*:*:*:*:*:* Versions r81.20 take_89 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_90:*:*:*:*:*:* Versions r81.20 take_90 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_92:*:*:*:*:*:* Versions r81.20 take_92 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_96:*:*:*:*:*:* Versions r81.20 take_96 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_98:*:*:*:*:*:* Versions r81.20 take_98 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_99:*:*:*:*:*:* Versions r81.20 take_99 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:-:*:*:*:*:*:* Versions r82 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_10:*:*:*:*:*:* Versions r82 take_10 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_103:*:*:*:*:*:* Versions r82 take_103 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_12:*:*:*:*:*:* Versions r82 take_12 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_14:*:*:*:*:*:* Versions r82 take_14 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_18:*:*:*:*:*:* Versions r82 take_18 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_19:*:*:*:*:*:* Versions r82 take_19 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_25:*:*:*:*:*:* Versions r82 take_25 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_33:*:*:*:*:*:* Versions r82 take_33 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_34:*:*:*:*:*:* Versions r82 take_34 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_36:*:*:*:*:*:* Versions r82 take_36 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_39:*:*:*:*:*:* Versions r82 take_39 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_41:*:*:*:*:*:* Versions r82 take_41 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_43:*:*:*:*:*:* Versions r82 take_43 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_44:*:*:*:*:*:* Versions r82 take_44 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_60:*:*:*:*:*:* Versions r82 take_60 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_73:*:*:*:*:*:* Versions r82 take_73 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82:take_91:*:*:*:*:*:* Versions r82 take_91 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82.10:-:*:*:*:*:*:* Versions r82.10 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82.10:take_19:*:*:*:*:*:* Versions r82.10 take_19 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_os:r82.10:take_6:*:*:*:*:*:* Versions r82.10 take_6 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:* Versions r80.20.00 to before r81.10.17 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:-:*:*:*:*:*:* Versions r81.10.17 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004508:*:*:*:*:*:* Versions r81.10.17 build_996004508 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004620:*:*:*:*:*:* Versions r81.10.17 build_996004620 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004653:*:*:*:*:*:* Versions r81.10.17 build_996004653 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004721:*:*:*:*:*:* Versions r81.10.17 build_996004721 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004892:*:*:*:*:*:* Versions r81.10.17 build_996004892 Vulnerable ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_1530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_1550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_1570:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_1570r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_1590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_1595r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_1600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_1800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_1900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_2000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:* Versions r80.20.00 to before r82.00.10 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:-:*:*:*:*:*:* Versions r82.00.10 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001559:*:*:*:*:*:* Versions r82.00.10 build_998001559 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001562:*:*:*:*:*:* Versions r82.00.10 build_998001562 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002110:*:*:*:*:*:* Versions r82.00.10 build_998002110 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002112:*:*:*:*:*:* Versions r82.00.10 build_998002112 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002133:*:*:*:*:*:* Versions r82.00.10 build_998002133 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002203:*:*:*:*:*:* Versions r82.00.10 build_998002203 Vulnerable ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_1535:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_1555:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_1575:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_1575r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_2530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_2550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_2560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_2570:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_2580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark_2590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-06-08 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2026-50751
- 2026-10-03 Alias added: GHSA-jqxh-x9f5-wcgw
- 2026-10-08 EPSS moved to the 99th percentile and above
References
More Check Point Gaia Embedded vulnerabilities
- TI-2026-58455 Improper Certificate Validation in Quantum Security Gateway KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-50751 · CVE Program
- CVE-2026-50751 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-jqxh-x9f5-wcgw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences