Critical Check Point VPN Vulnerability Exploited by Ransomware Gang

Check Point disclosed CVE-2026-50751, a critical (CVSS 9.3) authentication-bypass in Remote Access VPN/Mobile Access (notably affecting IKEv1 setups) that has been exploited since May 7, 2026 by actors linked to the Qilin ransomware group; emergency hotfixes were released and CISA added the CVE to its KEV catalog, with organizations urged to patch immediately and monitor SmartConsole logs for suspicious certificate authentication and attacker IPs.