CVE-2026-50751

This repository contains a functional exploit for CVE-2026-50751, a Check Point Remote Access VPN IKEv1 certificate-authentication bypass. The PoC demonstrates how an attacker can authenticate as a provisioned user without a valid certificate, private key, or password by exploiting a vulnerability in the iked service that skips certificate signature verification.

This repository contains a multi-threaded scanner for CVE-2026-50751, which detects if IKEv1 is enabled on Check Point Quantum Security Gateways. The tool sends minimal IKEv1 probes to target systems and checks for responses, but does not exploit the vulnerability.

This repository contains a functional Python exploit for CVE-2026-50751, which bypasses authentication in Check Point VPN gateways via a logic flaw in IKEv1 certificate validation. The exploit demonstrates the full attack chain from SA negotiation to VPN tunnel establishment.

This repository contains functional mitigation scripts for CVE-2026-50751, targeting Check Point VPN gateways. The scripts disable legacy client support and enforce IKEv2-only encryption to mitigate the vulnerability.

The repository contains a Python script that checks for the presence of IKEv1 on Check Point VPN gateways, which could indicate potential vulnerability to CVE-2026-50751. It does not exploit the vulnerability but scans for its presence.

The repository contains a functional IKEv1 authentication bypass exploit for Check Point gateways, but the cryptography module includes obfuscated malicious code that downloads and executes payloads from external URLs, indicating a trojanized exploit.