CVE-2026-50752

Katalog CVE

CVSS 7.4 · High EPSS 0,26%

Kerentanan Improper Certificate Validation. Skor CVSS 3.1 7.4 (High) menurut checkpoint.com.

Deskripsi (NVD)

A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.

Rincian

Terbit di NVD

8 Juni 2026

Terakhir diubah

23 Juli 2026

Status NVD

Awaiting Analysis

CVSS 3.1

7.4 (High), sumber checkpoint.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-295: Improper Certificate Validation

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,3% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://support.checkpoint.com/results/sk/sk185035