Check Point security advisory (AV26-559) - Update 1

Serial number: AV26-559
Date: June 8, 2026
Updated: June 9, 2026

On June 8, 2026, Check Point published a security advisory to address a critical vulnerability in the following products:

• Mobile Access / SSL VPN, Remote Access VPN, Spark Firewall – multiple versions
• Security Gateways, Spark Firewall – multiple versions

Check Point has observed active exploitation of this vulnerability.

Update 1

On June 8, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-50751 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.

• Security Advisory – Action Required – Active Exploitation of Check Point VPN Authentication Bypass (CVE-2026-50751)
• Check Point Security
• CISA KEV: CVE-2026-50751