CVE-2026-50752 | BDVDB-2026-338671 Detail

Description#

A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-06-08Record published in the CVE List.
2. Version 22026-06-10Most recent update recorded in the CVE List.