--- title: Check Point links VPN zero-day attacks to Qilin... description: Check Point has patched a critical authentication bypass vulnerability (CVE-2026-50751) in its Remote Access VPN and Mobile Access products, affecting... canonical: https://daily.dev/posts/check-point-links-vpn-zero-day-attacks-to-qilin-ransomware-gang-lxnnqkhtj twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Check Point links VPN zero-day attacks to Qilin ransomware gang | daily.dev og:description: Check Point has patched a critical authentication bypass vulnerability (CVE-2026-50751) in its Remote Access VPN and Mobile Access products, affecting... og:url: https://daily.dev/posts/check-point-links-vpn-zero-day-attacks-to-qilin-ransomware-gang-lxnnqkhtj og:image: https://api.daily.dev/og/posts/LXnNqkhtj.png og:image:alt: Check Point links VPN zero-day attacks to Qilin ransomware gang og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Check Point links VPN zero-day attacks to Qilin ransomware gang **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary Check Point has patched a critical authentication bypass vulnerability (CVE-2026-50751) in its Remote Access VPN and Mobile Access products, affecting deployments using the deprecated IKEv1 key exchange protocol. The flaw allows unauthenticated remote attackers to bypass authentication and establish VPN connections. Active exploitation began May 7 and has targeted a few dozen organizations globally, with at least one confirmed post-compromise incident linked to the Qilin ransomware gang. A second vulnerability (CVE-2026-50752) affecting certificate validation in IKEv1 was also discovered but has no confirmed in-the-wild exploitation. Customers are urged to apply hotfixes immediately or follow mitigation steps including disabling legacy IKEv1 support and enforcing machine certificate authentication. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Check Point warns of ransomware-linked attacks exploiting outdated VPN protocol](https://daily.dev/posts/check-point-warns-of-ransomware-linked-attacks-exploiting-outdated-vpn-protocol-ljwrt6vob) · CSO Online · 0 upvotes · 0 comments - [A Qilin ransomware affiliate exploited a Check Point VPN zero-day for a month before a patch existed](https://daily.dev/posts/a-qilin-ransomware-affiliate-exploited-a-check-point-vpn-zero-day-for-a-month-before-a-patch-existed-m3wbw9z8q) · The Next Web · 0 upvotes · 0 comments - [Critical Check Point VPN Zero-Day Exploited in the Wild \(CVE-2026-50751\)](https://daily.dev/posts/critical-check-point-vpn-zero-day-exploited-in-the-wild-cve-2026-50751--8lk5ari1g) · Rapid7 Cybersecurity Blog · 0 upvotes · 0 comments - [Check Point VPN Authentication Bypass \(CVE-2026-50751\): Client-Controlled IKEv1 Auth Flipped by Ransomware Affiliate](https://daily.dev/posts/check-point-vpn-authentication-bypass-cve-2026-50751-client-controlled-ikev1-auth-flipped-by-rans-ehcuolknf) · Latest Hacking News · 0 upvotes · 0 comments - [CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day](https://daily.dev/posts/cisa-gives-feds-3-days-to-patch-check-point-vpn-bug-exploited-as-zero-day-v4jbko8vp) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ransomware](https://daily.dev/tags/ransomware), [#vpn](https://daily.dev/tags/vpn), [#zero-day](https://daily.dev/tags/zero-day) [View this post on daily.dev](https://daily.dev/posts/check-point-links-vpn-zero-day-attacks-to-qilin-ransomware-gang-lxnnqkhtj) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Check Point links VPN zero-day attacks to Qilin ransomware gang","url":"https://daily.dev/posts/check-point-links-vpn-zero-day-attacks-to-qilin-ransomware-gang-lxnnqkhtj","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/check-point-links-vpn-zero-day-attacks-to-qilin-ransomware-gang-lxnnqkhtj"},"datePublished":"2026-06-08T13:05:31.556Z","dateModified":"2026-08-24T06:57:26.561Z","description":"Check Point has patched a critical authentication bypass vulnerability (CVE-2026-50751) in its Remote Access VPN and Mobile Access products, affecting...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/39a1a8480ab0d91ef0888ce5cb8b7539?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/39a1a8480ab0d91ef0888ce5cb8b7539?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/check-point-links-vpn-zero-day-attacks-to-qilin-ransomware-gang-lxnnqkhtj","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ransomware,vpn,zero-day","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Check Point links VPN zero-day attacks to Qilin ransomware gang"}]} ```