{"cvss":0.0,"datePublished":"2026-09-16T00:00:00Z","dateUpdated":"2026-09-16T00:00:00Z","description":"A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.","dueDate":"","id":"CVE-2026-50752","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"Quantum Security Gateway","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"  Improper Certificate Validation","vendor":"checkpoint"}