CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day
- On Monday, CISA added CVE-2026-50751 to its Known Exploited Vulnerabilities Catalog, ordering Federal Civilian Executive Branch agencies to secure their Check Point Remote Access VPN deployments by June 11.
- Unauthenticated remote attackers can exploit this flaw to bypass authentication on Check Point Quantum Security Gateways configured with the deprecated IKEv1 key exchange protocol lacking Machine Certificate Authentication.
- Israeli cybersecurity company Check Point released updates Monday after confirming attacks surged since May 7, linking one incident to the Qilin Ransomware-as-a-Service operation.
- CISA noted this vulnerability poses "significant risks to the federal enterprise," while Check Point advises configuring Remote Access VPN Authentication to IKEv2 only to mitigate threats.
- Two years ago, CISA tagged CVE-2024-24919 as actively exploited in Check Point gateways; security teams currently log 54% of successful attacks and alert on just 14%.
15 Articles
15 Articles
BleepingComputer
databreaches.netCISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day
CISA has ordered U.S. government agencies to secure their Check Point Remote Access VPN and Mobile Access deployments against a critical vulnerability exploited in zero-day attacks by Qilin ransomware affiliates.
Why did CISA give federal agencies 3 days?
CISA response to an actively exploited VPN bug CISA directed US federal agencies to fix a VPN vulnerability within three days after a ransomware gang began exploiting it. The issue affected security tools used across the federal government, meaning the operational blast radius could be broad if…
LiteLLM Vulnerability CVE-2026-42271: 7 Things to Know
CISA added CVE-2026-42271, a command injection flaw in LiteLLM, to its Known Exploited Vulnerabilities catalog this morning. Researchers at Horizon3.ai have confirmed a chained exploit path that achieves unauthenticated remote code execution with no credentials required. Here is what you need to know. 1. What LiteLLM is and why it’s a target LiteLLM is an […] The post Top 7 Things to Know About the LiteLLM CVE-2026-42271 Exploit appeared first o…
Multiple vulnerabilities have been discovered in the VPN Check Point. They allow an attacker to cause a circumvention of the security policy. Check Point indicates that the vulnerability CVE-2026-50751 is actively exploited. Vulnerability CVE-2026-50751 affects the security... See online: https://www.cert.ssi.gouv.fr/avis/C...
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
