Checkpoint Spark Firewalls vulnerabilities

2 vulnerabilities

Known vulnerabilities in Checkpoint Spark Firewalls, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.3CVE-2026-50751checkpointgaia_embedded+3KEVRansomware
EPSS score
85.34%
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.7.4CVE-2026-50752checkpointquantum_security_gateway_firmware+1
EPSS score
0.26%
A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.