Check Point IKEv1 VPN Auth Bypass (CVE‑2026‑50751) Exploited in Wild
Check Point’s IKEv1 Remote Access VPN contains a critical authentication bypass (CVE‑2026‑50751, CVSS 9.3) that attackers have been exploiting since early May 2026, targeting dozens of organizations and even a ransomware affiliate. The flaw lets clients skip certificate validation, letting unauthenticated users gain network access. Patch the listed Gaia versions immediately.