Check Point VPN Vulnerability Exploited in the Wild with Ransomware Links

Critical Check Point VPN vulnerability CVE-2026-50751 (CVSS 9.3) enables certificate-validation bypass allowing unauthenticated administrative sessions; active exploitation has been observed since early May 2026 with attack volumes increasing in June. Post-compromise artifacts and download attempts have been linked to Qilin Linux ransomware, a secondary CVE (CVE-2026-50752) introduces man-in-the-middle risks for site-to-site tunnels, and the report urges immediate hotfix deployment, extensive log audits, and continuous configuration monitoring.