Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks

A Qilin ransomware affiliate exploited a Check Point VPN zero-day for a month before a patch existed

Check Point patched CVE-2026-50751, a critical VPN auth bypass exploited since May 7. A Qilin ransomware affiliate used it to hit dozens of organisations.