Exploited vulnerabilitiesBriefConfirmed by two or more outlets
Check Point Remote Access VPN auth bypass (CVE-2026-50751)
IKEv1 certificate-validation logic flaw.
- Disclosed
What happened
- IKEv1 certificate-validation logic flaw. CVSS 9.3. Exploited from 7 May 2026. KEV: 8 Jun 2026.
- Fix: hotfix sk185033. Ransomware links reported but not confirmed by CISA.
Live scores
Live scores
CVE-2026-50751- EPSS
- 0.853
very likely to be attacked soon - VEDAS
- 0.984
strong exploit evidence - On CISA KEV
- Yes, since 2026-06-08
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Sources
- https://rapid7.com/blog/post/etr-critical-check-point-vpn-zero-day-exploited-in-the-wild-cve-2026-50751/
- https://bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-check-point-flaw-exploited-by-ransomware-gangs
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.