MalwarePublished 9 Jun 2026

Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks

Source SecurityWeek

Mentions 2 CVEs

Mentioned vulnerabilities

Description

The authentication bypass vulnerability allows attackers to establish VPN connections without a valid password. The post Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks appeared first on SecurityWeek .

Impact

The vulnerability allows attackers to bypass authentication and establish VPN connections without valid credentials, potentially granting unauthorized network access. Exploitation has been linked to ransomware attacks by the financially motivated Qilin ransomware affiliate. The flaw affects remote access and mobile access VPN sessions, increasing the risk of unauthorized access and subsequent malicious activity within targeted organizations. The related man-in-the-middle vulnerability (CVE-2026-50752) could compromise VPN site-to-site communications if exploited, though no exploitation has been observed to date.

Defensive guidance

Check Point has released official hotfixes addressing CVE-2026-50751 and CVE-2026-50752 for affected appliances. Organizations should apply these hotfixes promptly. The US CISA has included CVE-2026-50751 in its Known Exploited Vulnerabilities catalog and recommends patching by June 11, 2026. Follow Check Point's published indicators of compromise and mitigation guidance. No alternative mitigations or workarounds are specified beyond applying the vendor-provided hotfixes.

References

securityweek.com/check-point-vpn-zero-day-exploited-in-qilin-ransomware-attacks/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 9 Jun 2026, 09:55 UTC

References

Community reviews

Related threats