CISA orders 3-day patch for Check Point VPN bug

CISA ordered U.S. federal agencies to patch a critical Check Point VPN vulnerability (CVE-2026-50751) within three days. The flaw, exploited by Qilin ransomware affiliates as a zero-day, allows unauthenticated remote attackers to bypass authentication on devices using the deprecated IKEv1 protocol. Check Point released updates on Monday.