CVE-2026-50751-Mitigation-Scripts

Adam_Forester — Mon, 08 Jun 2026 16:12:58 GMT

This is more for MDS customers than it is for SMS but I did include the one line for SMS even though you just need to click one box in the GUI. I'm a cli guy so I like it.

I have since updated this to do either mitigation 1 or 2 automatically. So there are scripts to turn off the legacy check box or to turn off ikev1

The legacy check box is through generic object but I tested on my SMS with multiple gateways and it worked great. Use at own risk though because of generic object.

MDS this will make the global change to ike v2 on all Domains for you. Quicker than open close. Please note changing to ike v2 is mitigation step 2 and you should make sure you read https://support.checkpoint.com/results/sk/sk166415 before making that switch.

I am working on scripts to do the per-gateway mitigation of disabling legacy clients.

https://github.com/WadesWeaponShed/CVE-2026-50751-Mitigation-Scripts

topic CVE-2026-50751-Mitigation-Scripts in Automation and APIs

CVE-2026-50751-Mitigation-Scripts