CVE-2024-24919

Divulgación de información en Check Point Security Gateways - CVE-2024-24919 Permitiendo potencialmente a un atacante leer cierta información en Check Point Security Gateways una vez conectados a Internet y habilitados con Remote Access VPN o Mobile Access Software Blades. Hay disponible un parch...

Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

SOC警报分析：Checkpoint Security Gateway任意文件读取漏洞 CVE-2024-24919 介绍 CVE-2024-24919 是一个关键的 Check Point Security Gateways 零日漏洞，允许未经认证的远程攻击者从受影响系统中读取任意文件。该漏洞于 2024 年 5 月被发现并在野外被积极利用，针对启用了远程访问 VPN 或移动接入 Blade 的设备。攻击者可利用此漏洞访问敏感文件（如密码哈希和 SSH 密钥），进而可能完全控制系统。鉴于其严重性和已被利用的状态，强烈建议立即修补和缓解。 调查与修复 为调查并修复该警报，我采取了以下步骤...

Check Point Gaia Operating System (sk1000117)

The remote host is missing a hotfix for the Gaia Operating System. It is, therefore, affected by a vulnerability as referenced in the sk1000117 advisory. - An improper certificate validation vulnerability in Check Point Security Gateway and Check Point Spark Firewall when configured for Site to...

watchTowr-vs-Check-Point-CVE-2026-50751

CVE-2026-50751 一个 Check Point 远程访问 VPN IKEv1 证书认证绕过检测工件生成器。 https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e 详见我们的博客文章以获取技术细节。 检测演示 $ python3 watchTowr-vs-Check-Point-CVE-2026-50751.py -rh vpn.example.com -u watchtowr / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ ...

CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit

CVE-2026-50751 - Check Point IKEv1 认证绕过利用工具 ⚠️ 重要警告 此代码仅用于教育目的和授权的安全测试。 未经明确许可对系统进行未授权使用是非法的。 作者不对该工具的滥用行为承担任何责任。 📋 描述 CVE-2026-50751 是 Check Point 已弃用的 IKEv1 协议中的一个严重认证绕过漏洞，影响 Remote Access VPN 和 Mobile Access。未认证的攻击者可利用证书验证中的缺陷，在无需有效密码的情况下建立 VPN 连接。 技术细节 类型 ：认证绕过 CWE-287 CVSS 评分 ：9.3（严重） 攻击向量...

CVE-2026-50751

🚨 CVE-2026-50751 - Check Point VPN 中的认证绕过漏洞 IKEv1 📖 概述 CVE-2026-50751 是一个严重的认证绕过漏洞，影响配置了传统 IKEv1 远程访问 VPN 协议的 Check Point Quantum 安全网关 部署。 该漏洞允许未经身份验证的攻击者在没有有效用户密码的情况下建立 VPN 会话，可能获得对内部网络资源的未授权访问。 🎯 影响 攻击者可以： 绕过 VPN 认证 获得未授权的远程访问 建立有效的 VPN 会话 访问内部服务和资源 在网络内进行横向移动 为后续勒索软件或入侵活动提供便利 🔍 漏洞详情 字段| 值...

Check Point Multiple Products Improper Certificate Validation Vulnerability

Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...

CVE-2024-24919-Check-Point-Remote-Access-VPN

CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919 è una vulnerabilità di lettura arbitraria di file non autenticata che può essere considerata niente di meno che una RCE completa non autenticata. Un attaccante può leggere qualsiasi file sensibile situato sull'appliance interessata con...

Cisco ASA/FTD Authentication Bypass Using an Alternate Path or Channel (CVE-2023-20269)

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or ...

EUVD-2026-42708

An Out-of-bounds Write vulnerability in the http-gatekeeper http-gk of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a...

CVE-2026-57021

An Out-of-bounds Write vulnerability in the http-gatekeeper http-gk of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a...

CVE-2026-57021: Out-of-bounds Write

An Out-of-bounds Write vulnerability in the http-gatekeeper http-gk of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a...

PT-2026-56975

Name of the Vulnerable Software and Affected Versions Junos OS on SRX Series versions prior to 23.2R2-S7 Junos OS on SRX Series versions prior to 23.4R2-S8 Junos OS on SRX Series versions prior to 24.2R2-S4 Junos OS on SRX Series versions prior to 24.4R2-S4 Junos OS on SRX Series versions prior t...

Exploit for Improper Authentication in Checkpoint Gaia_Os

CVE-2026-50751 — Check Point IKEv1 Authentication Bypass...

Critical Check Point VPN Zero-Day Exploited in the Wild (CVE-2026-50751)

Overview On June 8, 2026, Check Point published a security advisory for CVE-2026-50751, a critical authentication bypass vulnerability affecting Check Point Remote Access VPN, Mobile Access, and Spark Firewall products. The vulnerability affects deployments configured to use the deprecated IKEv1...

MacGregor Voyage Data Recorder (VDR) G4e

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could result in an attacker gaining administrator access to the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network...

Cisco Adaptive Security Appliance (ASA) Software VPN DoS Vulnerabilities (cisco-sa-asaftd-vpn-m9sx6MbC)

According to its self-reported version, Cisco ASA Software is affected by multiple vulnerabilities. - A vulnerability in the Lua interpreter of the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD...

Cisco Firepower Threat Defense (FTD) Software VPN DoS Vulnerabilities (cisco-sa-asaftd-vpn-m9sx6MbC)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. - A vulnerability in the Lua interpreter of the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure...

CVE-2026-20106

A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust device memory resulting in a denial of...

CVE-2026-20082

A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause incoming TCP SYN packets to be dropped incorrectly. This vulnerability is due to improper handling of new,...