Back Feeds2.Feedburner

Qilin ransomware affiliate exploited Check Point VPN zero-day (CVE-2026-50751)

Feeds2.Feedburner •Zeljka Zorz • June 8, 2026

A Qilin ransomware affiliate is believed to be exploiting CVE-2026-50751, an authentication bypass vulnerability in Check Point VPN Remote Access and Mobile Access, the company announced on Monday. CVE-2026-50751 Check Point Remote Access VPN enables and secures connections between corporate networks and remote or mobile devices. Check Point Mobile Access lets mobile and remote workers connect securely to email, calendar, contacts, and corporate applications. CVE-2026-50751 affects both solutions (i.e., functions on Check Point Security … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Check Point VPN Vulnerability Exploited by Ransomware Gang Check Point Software Technologies disclosed a critical authentication bypass vulnerability (CVE-2026-50751) affecting its Remote Access VPN and Mobile Access products, with exploitation confirmed since May 7, 2026. The flaw allows unauthenticated attackers to establish VPN sessions without valid credentials by exploiting a logic error in certificate validation, particularly in setups using the deprecated IKEv1 key exchange protocol. The vulnerability has been linked to the Qilin ransomware group, which has targeted several dozen organizations globally. Check Point has released emergency hotfixes and urged affected customers to apply them immediately. A related vulnerability, CVE-2026-50752, was also identified but has not been confirmed as exploited in the wild. The situation poses significant operational risks for organizations still using IKEv1 configurations. CISA has added CVE-2026-50751 to its Known Exploited Vulnerabilities catalog, mandating federal agencies to patch by June 11, 2026. 33 sources 79

Extracted Entities

Qilin ransomware affiliate exploited Check Point VPN zero-day (CVE-2026-50751)

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (2)

Ransomware Groups (1)