There was a stir in America: CISA issued a 24-hour ultimatum, this ‘dangerous’ flaw of VPN increased the risk of cyber attack.

America, the world’s largest superpower, is currently under the shadow of a serious cyber threat. The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a major alert and has given strict instructions to all federal government agencies to fix a very serious flaw found in VPN within 24 hours. This warning comes as hackers are actively trying to take advantage of this flaw to break into government networks.

What is dangerous CVE-2026-50751 flaw

The flaw about which the entire US government is on alert is named ‘CVE-2026-50751’. This vulnerability has been discovered in Check Point’s Remote Access VPN and Mobile Access products. Cyber ​​experts say that through this flaw, attackers can directly gain ‘remote access’ to the system without any permission. This vulnerability specifically targets systems with legacy ‘IKEv1’ protocols that do not use ‘Machine Certificates’ for security.

Strict deadline till June 11

Considering the seriousness of this threat, CISA has included it in its ‘Known Exploited Vulnerabilities’ (KEV) list. The agency has given all federal civilian agencies, including the Department of Homeland Security, the State Department and the Treasury Department, a deadline of June 11 to apply the patch. CISA has clearly warned that this flaw is not just a technical flaw, but a huge threat to federal networks, which is already being used in real cyber attacks.

Government network in the eyes of ransomware gangs

Check Point’s investigation has revealed that the attacks, taking advantage of this loophole, had started as early as May 7, but last weekend there was a sudden dangerous increase in the number of attacks. According to reports, notorious gangs like ‘Qilin’ ransomware may be behind this flaw. Till now dozens of organizations have been targeted around the world. Check Point has requested all its customers to immediately install the security update (patch). CISA has also directed that if it is not possible to apply a patch to a system, use of the affected products be discontinued immediately. This warning shows that this had become a major ‘backdoor’ for cyber criminals to enter government networks, closing which has now become a priority.