CVE-2026-50752

Scumbags, including a Qilin ransomware affiliate, began hitting this hole May 7

Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the deprecated IKEv1 key exchange protocol. The vulnerability, tracked as CVE-2026-50751 (CVSS score: 9.3), is a case of a logic flow weakness in certificate validation that allows an unauthenticated remote attacker to bypass user

Angreifer missbrauchen eine kritische Sicherheitslücke in Check-Point-VPN-Software. Sie können dadurch die Authentifizierung umgehen.

Check Point says a critical vulnerability in its Remote Access VPN and Mobile Access solutions has been exploited by Qilin

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Check Point Remote Access VPN und Check Point Mobile Access ausnutzen, um Sicherheitsvorkehrungen zu umgehen.