ET WEB_SERVER Check Point VPN IKEv1 (TCPT) Authentication Bypass (CVE-2026-50751)

7.0.3 5.0SID: 2071165Rev: 1Enabled13 views

Fileemerging-web_server.rules

CreatedJuly 13, 2026

UpdatedJuly 13, 2026

Classificationattempted-user

alert tcp any any -> $HOME_NET 443 (msg:"ET WEB_SERVER Check Point VPN IKEv1 (TCPT) Authentication Bypass (CVE-2026-50751)"; reference:url,labs.watchtowr.com/marking-your-own-homework-check-point-remote-access-vpn-ikev1-authentication-bypass-cve-2026-50751/; reference:cve,2026-50751; classtype:attempted-user; sid:2071165; rev:1; metadata:attack_target Server, created_at 2026_07_13, cve CVE_2026_50751, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, tag Exploit, updated_at 2026_07_13, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique_name Exploit_Public_Facing_Application;)

Detection details are hidden.

References

url	labs.watchtowr.com/marking-your-own-homework-check-point-remote-access-vpn-ikev1-authentication-bypass-cve-2026-50751/
cve	2026-50751

Metadata

attack targetServer

created at2026_07_13

cve

CVE-2026-50751

deploymentInternal

confidenceHigh

signature severityMajor

tagExploit

updated at2026_07_13

mitre tactic idTA0001

mitre tactic nameInitial_Access

mitre technique idT1190

mitre technique nameExploit_Public_Facing_Application

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!