Investing.com -- Check Point Software Technologies Ltd. stock fell 2.5% in morning trading after the company publicly disclosed an actively exploited critical security flaw in its flagship VPN products, rattling investor confidence at a time when the broader market was climbing. The vulnerability, tracked as CVE-2026-50751, affects the company’s Remote Access VPN and Mobile Access solutions when configured with the deprecated IKEv1 key exchange protocol, and enables unauthenticated attackers to bypass login requirements entirely and establish unauthorized VPN sessions. The disclosure is particularly damaging because exploitation has already been confirmed in the wild, with a Qilin ransomware affiliate identified as one of the threat actors behind the attacks, which appear to date back to at least early May 2026 and intensified in early June. A second related flaw, CVE-2026-50752, affecting site-to-site VPN certificate validation, was also revealed as part of the same investigation, compounding concerns. The company filed a Form 6-K with the SEC on the same day, formalizing the disclosure to investors. The sell-off stands in stark contrast to the broader market’s positive tone today, with the S&P 500 and NASDAQ both trading firmly higher, underscoring that the pressure on CHKP is entirely company-specific. The news also arrives against a backdrop of already-cautious analyst sentiment, with several firms having recently trimmed price targets and flagged concerns market losses to rivals such as Palo Alto Networks and Fortinet.
The disclosure is particularly damaging because exploitation has already been confirmed in the wild, with a Qilin ransomware affiliate identified as one of the threat actors behind the attacks, which appear to date back to at least early May 2026 and intensified in early June. A second related flaw, CVE-2026-50752, affecting site-to-site VPN certificate validation, was also revealed as part of the same investigation, compounding concerns. The company filed a Form 6-K with the SEC on the same day, formalizing the disclosure to investors.
The sell-off stands in stark contrast to the broader market’s positive tone today, with the S&P 500 and NASDAQ both trading firmly higher, underscoring that the pressure on CHKP is entirely company-specific. The news also arrives against a backdrop of already-cautious analyst sentiment, with several firms having recently trimmed price targets and flagged concerns market losses to rivals such as Palo Alto Networks and Fortinet.
Together, the active exploitation of a critical VPN flaw, the ransomware linkage, and the formal regulatory disclosure created a confluence of negative signals that outweighed any broader market tailwind, pushing CHKP shares to an intraday low of $131.26 and keeping the stock well off its 52-week high of $232.07.
This article was generated with the support of AI and reviewed by an editor. For more information see our T&C.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
