Check Point Gaia: CVE-2026-50751: Authentication bypass on Remote Access VPN and Mobile Access in deprecated IKEv1 key exchange allows unauthenticated remote VPN connection.

A critical authentication bypass vulnerability in Check Point Remote Access VPN and Mobile Access deployments configured to use the deprecated IKEv1 key exchange protocol. By exploiting a logic flaw in the certificate validation logic, an unauthenticated remote attacker can bypass user authentication and establish a remote access VPN connection without a valid user password. This vulnerability affects Security Gateways with legacy Remote Access clients enabled that do not require machine certificate authentication. Check Point has confirmed active exploitation in the wild, including post-compromise activity associated with the Qilin ransomware group. A related vulnerability, CVE-2026-50752, also affects certificate validation in deprecated IKEv1 and may allow man-in-the-middle attacks on site-to-site VPN connections.