User Authentication Bypass in VPN Remote Access and Mobile Access

Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.

What is CVE-2026-50751?

CVE-2026-50751 is a vulnerability classified as Improper Authentication, affecting Quantum Security Gateway (affected versions: R82.10 with Jumbo Hotfix Take 19 or below, R82 with Jumbo Hotfix Take 103 or below, and other affected versions) and Spark Firewalls (affected versions: R80.20.X, R81.10.X, and R82.00.X). This vulnerability is rated Critical, with a CVSS score of 9.3. This vulnerability has been observed being exploited in the wild.

Analyzing data...

Overview

Original source data

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Affected products and scope

Analyzing data...

Technical details

Analyzing data...

Exploitability

Analyzing data...

Technical impact

Analyzing data...

Business impact

Analyzing data...

Remediation

Analyzing data...

Detection

Analyzing data...
Sources (10)
Learn more

Run an in-depth assessment with complete web risk management

CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.