Check Point patched CVE-2026-50751, a critical VPN auth bypass exploited since May 7. A Qilin ransomware affiliate used it to hit dozens of organisations.