CVE-2026-50751: CRITICAL (CVSS 9.3), Actively Exploited (CISA KEV)

CRITICAL (CVSS 9.3), Actively Exploited (CISA KEV), EPSS 71.1%. A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.