CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Check Point Remote Access VPN and Mobile Access Authentication Bypass Vulnerability (CVE-2026-50751) Security Advisory
[Affected Scope] Check Point Remote Access and Mobile Access VPN gateways utilizing the deprecated IKEv1 key exchange protocol
[Impact] Unauthenticated remote attackers can bypass user authentication and establish unauthorized VPN connections without valid user credentials
[Mitigation] Apply the official vendor hotfixes immediately, or disable the deprecated IKEv1 protocol and transition to IKEv2
Cisco IOS and IOS XE Software IKEv1 Denial of Service Vulnerability (CVE-2018-0159)
[Affected Scope] Cisco IOS and IOS XE Software configured with active Internet Key Exchange Version 1 (IKEv1) functionality.
[Impact] An unauthenticated, remote attacker can cause the affected device to reload by sending crafted IKEv1 packets, resulting in a complete Denial of Service (DoS) condition.
[Mitigation] Apply the official software updates provided by Cisco, or restrict IKEv1 traffic (UDP ports 500 and 4500) to trusted peer IP addresses using Access Control Lists (ACLs).
Cisco IOS / IOS XE / IOS XR / PIX IKEv1 Information Disclosure Vulnerability (CVE-2016-6415, BENIGNCERTAIN)
[Affected Scope] Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0
[Impact] Unauthenticated remote attackers can retrieve sensitive information from device memory (including private keys and configuration data) by sending crafted IKEv1 negotiation requests
[Mitigation] Upgrade affected device firmware to the latest patched releases, or restrict access to UDP ports 500 and 4500 using infrastructure ACLs to trusted peers only