Five edge VPN flaws CISA flags for ransomware use

This report catalogs five critical internet-facing VPN and firewall vulnerabilities (CVE-2024-53704, CVE-2025-22457, CVE-2025-14733, CVE-2026-0257, CVE-2026-50751) added to CISA's Known Exploited Vulnerabilities list between Feb 2025 and Jun 2026, notes they are rated >=9.1, highlights evidence of active exploitation and linkage to ransomware activity (including a Qilin affiliate in one case), and provides fixed builds, mitigation steps (patch/replace, integrity checks, exposure reduction, secret rotation), and log-hunting guidance.