{"id":1581,"date":"2026-06-09T07:20:40","date_gmt":"2026-06-09T00:20:40","guid":{"rendered":"https:\/\/vncybers.vn\/canh-bao-lo-hong-check-point-vpn-cve-2026-50751-dang-bi-khai-thac-co-lien-he-qilin\/"},"modified":"2026-06-09T07:20:40","modified_gmt":"2026-06-09T00:20:40","slug":"canh-bao-lo-hong-check-point-vpn-cve-2026-50751-dang-bi-khai-thac-co-lien-he-qilin","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/canh-bao-lo-hong-check-point-vpn-cve-2026-50751-dang-bi-khai-thac-co-lien-he-qilin\/","title":{"rendered":"C\u1ea3nh b\u00e1o l\u1ed7 h\u1ed5ng Check Point VPN CVE-2026-50751 \u0111ang b\u1ecb khai th\u00e1c, c\u00f3 li\u00ean h\u1ec7 Qilin"},"content":{"rendered":"<p>Check Point ng\u00e0y 08\/06\/2026 \u0111\u00e3 ph\u00e1t h\u00e0nh c\u1ea3nh b\u00e1o kh\u1ea9n v\u1ec1 CVE-2026-50751, m\u1ed9t l\u1ed7 h\u1ed5ng b\u1ecf qua x\u00e1c th\u1ef1c nghi\u00eam tr\u1ecdng trong c\u00e1c tri\u1ec3n khai Remote Access VPN v\u00e0 Mobile Access c\u00f2n s\u1eed d\u1ee5ng giao th\u1ee9c trao \u0111\u1ed5i kh\u00f3a IKEv1 \u0111\u00e3 l\u1ed7i th\u1eddi. Theo h\u00e3ng, l\u1ed7 h\u1ed5ng \u0111ang b\u1ecb khai th\u00e1c th\u1ef1c t\u1ebf v\u00e0 c\u00f3 th\u1ec3 cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng t\u1eeb xa thi\u1ebft l\u1eadp phi\u00ean VPN m\u00e0 kh\u00f4ng c\u1ea7n m\u1eadt kh\u1ea9u h\u1ee3p l\u1ec7.<\/p>\n<p style=\"text-align: center;\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1200\" height=\"800\" src=\"https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/06\/vpn-laptop-pexels.jpg\" alt=\"\u1ea2nh minh h\u1ecda k\u1ebft n\u1ed1i VPN t\u1eeb xa tr\u00ean laptop\" class=\"wp-image-1579\" style=\"max-width: 100%; height: auto;\" srcset=\"https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/06\/vpn-laptop-pexels.jpg 1200w, https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/06\/vpn-laptop-pexels-300x200.jpg 300w, https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/06\/vpn-laptop-pexels-1024x683.jpg 1024w, https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/06\/vpn-laptop-pexels-768x512.jpg 768w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<h2>\u0110i\u1ec3m ch\u00ednh c\u1ee7a s\u1ef1 c\u1ed1<\/h2>\n<p>CVE-2026-50751 \u0111\u01b0\u1ee3c Check Point m\u00f4 t\u1ea3 l\u00e0 l\u1ed7i trong lu\u1ed3ng x\u00e1c th\u1ef1c ch\u1ee9ng ch\u1ec9 c\u1ee7a Remote Access v\u00e0 Mobile Access khi h\u1ec7 th\u1ed1ng v\u1eabn c\u1ea5u h\u00ecnh IKEv1. Trong k\u1ecbch b\u1ea3n b\u1ecb khai th\u00e1c, tin t\u1eb7c kh\u00f4ng c\u1ea7n t\u00e0i kho\u1ea3n h\u1ee3p l\u1ec7 v\u1eabn c\u00f3 th\u1ec3 v\u01b0\u1ee3t qua b\u01b0\u1edbc x\u00e1c th\u1ef1c ban \u0111\u1ea7u v\u00e0 t\u1ea1o k\u1ebft n\u1ed1i VPN t\u1eeb xa v\u00e0o m\u00f4i tr\u01b0\u1eddng m\u1ee5c ti\u00eau.<\/p>\n<p>M\u1ee9c \u0111\u1ed9 r\u1ee7i ro n\u1eb1m \u1edf ch\u1ed7 VPN th\u01b0\u1eddng l\u00e0 c\u1eeda ng\u00f5 truy c\u1eadp v\u00e0o m\u1ea1ng n\u1ed9i b\u1ed9. D\u00f9 Check Point nh\u1ea5n m\u1ea1nh r\u1eb1ng k\u1ebb t\u1ea5n c\u00f4ng v\u1eabn c\u1ea7n th\u1ef1c hi\u1ec7n th\u00eam ho\u1ea1t \u0111\u1ed9ng sau x\u00e1c th\u1ef1c \u0111\u1ec3 truy c\u1eadp t\u00e0i nguy\u00ean n\u1ed9i b\u1ed9 ho\u1eb7c leo thang \u0111\u1eb7c quy\u1ec1n, vi\u1ec7c c\u00f3 \u0111\u01b0\u1ee3c phi\u00ean VPN tr\u00e1i ph\u00e9p \u0111\u00e3 \u0111\u1ee7 t\u1ea1o ra b\u00e0n \u0111\u1ea1p nguy hi\u1ec3m cho x\u00e2m nh\u1eadp s\u00e2u h\u01a1n.<\/p>\n<h2>Nh\u1eefng h\u1ec7 th\u1ed1ng n\u00e0o b\u1ecb \u1ea3nh h\u01b0\u1edfng<\/h2>\n<p>Ph\u1ea1m vi \u1ea3nh h\u01b0\u1edfng t\u1eadp trung v\u00e0o c\u00e1c tri\u1ec3n khai Check Point Remote Access VPN, Mobile Access ho\u1eb7c m\u1ed9t s\u1ed1 c\u1ea5u h\u00ecnh gateway c\u00f2n ch\u1ea5p nh\u1eadn IKEv1. C\u00e1c h\u1ec7 th\u1ed1ng ch\u1ec9 s\u1eed d\u1ee5ng IKEv2 kh\u00f4ng n\u1eb1m trong nh\u00f3m r\u1ee7i ro ch\u00ednh theo th\u00f4ng tin t\u1eeb Check Point.<\/p>\n<p>IKEv1 l\u00e0 giao th\u1ee9c c\u0169, \u0111\u00e3 b\u1ecb thay th\u1ebf trong nhi\u1ec1u m\u00f4i tr\u01b0\u1eddng hi\u1ec7n \u0111\u1ea1i nh\u01b0ng v\u1eabn c\u00f3 th\u1ec3 t\u1ed3n t\u1ea1i v\u00ec y\u00eau c\u1ea7u t\u01b0\u01a1ng th\u00edch v\u1edbi thi\u1ebft b\u1ecb ho\u1eb7c m\u00e1y kh\u00e1ch legacy. \u0110\u00e2y l\u00e0 \u0111i\u1ec3m y\u1ebfu ph\u1ed5 bi\u1ebfn trong v\u1eadn h\u00e0nh h\u1ea1 t\u1ea7ng: th\u00e0nh ph\u1ea7n kh\u00f4ng c\u00f2n \u0111\u01b0\u1ee3c \u01b0u ti\u00ean v\u1eabn duy tr\u00ec trong c\u1ea5u h\u00ecnh s\u1ea3n xu\u1ea5t v\u00e0 tr\u1edf th\u00e0nh b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng khi c\u00f3 l\u1ed7 h\u1ed5ng m\u1edbi.<\/p>\n<h2>D\u1ea5u hi\u1ec7u khai th\u00e1c v\u00e0 li\u00ean h\u1ec7 v\u1edbi ransomware<\/h2>\n<p>Check Point cho bi\u1ebft ho\u1ea1t \u0111\u1ed9ng khai th\u00e1c \u0111\u00e3 \u0111\u01b0\u1ee3c ghi nh\u1eadn trong th\u1ef1c t\u1ebf, v\u1edbi s\u1ed1 l\u01b0\u1ee3ng n\u1ea1n nh\u00e2n quan s\u00e1t \u0111\u01b0\u1ee3c \u1edf m\u1ee9c v\u00e0i ch\u1ee5c t\u1ed5 ch\u1ee9c tr\u00ean to\u00e0n c\u1ea7u. M\u1ed9t tr\u01b0\u1eddng h\u1ee3p c\u00f3 ho\u1ea1t \u0111\u1ed9ng sau x\u00e2m nh\u1eadp \u0111\u01b0\u1ee3c x\u00e1c nh\u1eadn li\u00ean quan \u0111\u1ebfn affiliate c\u1ee7a nh\u00f3m ransomware Qilin, khi\u1ebfn s\u1ef1 c\u1ed1 n\u00e0y \u0111\u1eb7c bi\u1ec7t \u0111\u00e1ng ch\u00fa \u00fd v\u1edbi c\u00e1c doanh nghi\u1ec7p \u0111ang v\u1eadn h\u00e0nh truy c\u1eadp t\u1eeb xa cho nh\u00e2n vi\u00ean v\u00e0 \u0111\u1ed1i t\u00e1c.<\/p>\n<p>BleepingComputer c\u0169ng ghi nh\u1eadn c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng b\u1eaft \u0111\u1ea7u t\u1eeb ng\u00e0y 07\/05\/2026 v\u00e0 t\u0103ng m\u1ea1nh v\u00e0o \u0111\u1ea7u th\u00e1ng 6\/2026. D\u1eef li\u1ec7u n\u00e0y cho th\u1ea5y l\u1ed7 h\u1ed5ng kh\u00f4ng ch\u1ec9 l\u00e0 r\u1ee7i ro l\u00fd thuy\u1ebft, m\u00e0 \u0111\u00e3 b\u01b0\u1edbc v\u00e0o giai \u0111o\u1ea1n khai th\u00e1c c\u00f3 m\u1ee5c ti\u00eau tr\u01b0\u1edbc khi nhi\u1ec1u t\u1ed5 ch\u1ee9c k\u1ecbp r\u00e0 so\u00e1t l\u1ea1i c\u1ea5u h\u00ecnh VPN.<\/p>\n<h2>Recommendations for Administrators<\/h2>\n<p>C\u00e1c t\u1ed5 ch\u1ee9c s\u1eed d\u1ee5ng s\u1ea3n ph\u1ea9m Check Point n\u00ean \u01b0u ti\u00ean ki\u1ec3m tra ngay c\u1ea5u h\u00ecnh Remote Access VPN v\u00e0 Mobile Access, \u0111\u1eb7c bi\u1ec7t l\u00e0 vi\u1ec7c c\u00f2n b\u1eadt ho\u1eb7c cho ph\u00e9p IKEv1 hay kh\u00f4ng. N\u1ebfu v\u1eabn c\u1ea7n IKEv1 v\u00ec l\u00fd do t\u01b0\u01a1ng th\u00edch, c\u1ea7n \u00e1p d\u1ee5ng hotfix ho\u1eb7c b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt do Check Point ph\u00e1t h\u00e0nh c\u00e0ng s\u1edbm c\u00e0ng t\u1ed1t.<\/p>\n<p>Song song v\u1edbi c\u1eadp nh\u1eadt, \u0111\u1ed9i ng\u0169 v\u1eadn h\u00e0nh n\u00ean r\u00e0 so\u00e1t nh\u1eadt k\u00fd VPN t\u1eeb \u0111\u1ea7u th\u00e1ng 5\/2026, t\u00ecm c\u00e1c phi\u00ean \u0111\u0103ng nh\u1eadp b\u1ea5t th\u01b0\u1eddng, \u0111\u1ecba ch\u1ec9 IP l\u1ea1, ho\u1ea1t \u0111\u1ed9ng truy c\u1eadp ngo\u00e0i gi\u1edd v\u00e0 d\u1ea5u hi\u1ec7u di chuy\u1ec3n ngang sau khi k\u1ebft n\u1ed1i VPN \u0111\u01b0\u1ee3c thi\u1ebft l\u1eadp. V\u1edbi m\u00f4i tr\u01b0\u1eddng c\u00f3 nguy c\u01a1 cao, vi\u1ec7c thu h\u1ed3i phi\u00ean \u0111ang ho\u1ea1t \u0111\u1ed9ng, xoay v\u00f2ng ch\u1ee9ng ch\u1ec9 li\u00ean quan v\u00e0 b\u1eaft bu\u1ed9c x\u00e1c th\u1ef1c m\u1ea1nh h\u01a1n l\u00e0 c\u00e1c b\u01b0\u1edbc c\u1ea7n \u0111\u01b0\u1ee3c c\u00e2n nh\u1eafc.<\/p>\n<h2>B\u00e0i h\u1ecdc r\u1ed9ng h\u01a1n v\u1ec1 truy c\u1eadp t\u1eeb xa<\/h2>\n<p>S\u1ef1 c\u1ed1 CVE-2026-50751 ti\u1ebfp t\u1ee5c cho th\u1ea5y c\u00e1c thi\u1ebft b\u1ecb bi\u00ean nh\u01b0 VPN, firewall v\u00e0 c\u1ed5ng truy c\u1eadp t\u1eeb xa l\u00e0 m\u1ee5c ti\u00eau \u01b0u ti\u00ean c\u1ee7a t\u1ed9i ph\u1ea1m m\u1ea1ng. Khi m\u1ed9t l\u1ed7 h\u1ed5ng b\u1ecf qua x\u00e1c th\u1ef1c xu\u1ea5t hi\u1ec7n t\u1ea1i l\u1edbp n\u00e0y, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 r\u00fat ng\u1eafn \u0111\u00e1ng k\u1ec3 chu\u1ed7i x\u00e2m nh\u1eadp, t\u1eeb \u0111\u00f3 t\u0103ng kh\u1ea3 n\u0103ng tri\u1ec3n khai m\u00e3 \u0111\u1ed9c t\u1ed1ng ti\u1ec1n, \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u ho\u1eb7c duy tr\u00ec hi\u1ec7n di\u1ec7n trong m\u1ea1ng n\u1ed9i b\u1ed9.<\/p>\n<p>\u0110\u1ed1i v\u1edbi doanh nghi\u1ec7p, bi\u1ec7n ph\u00e1p ph\u00f2ng th\u1ee7 kh\u00f4ng n\u00ean ch\u1ec9 d\u1eebng \u1edf vi\u1ec7c v\u00e1 l\u1ed7i. C\u1ea7n duy tr\u00ec ki\u1ec3m k\u00ea t\u00e0i s\u1ea3n bi\u00ean, lo\u1ea1i b\u1ecf giao th\u1ee9c legacy, gi\u00e1m s\u00e1t \u0111\u0103ng nh\u1eadp t\u1eeb xa theo h\u00e0nh vi, ph\u00e2n \u0111o\u1ea1n m\u1ea1ng sau VPN v\u00e0 ki\u1ec3m tra \u0111\u1ecbnh k\u1ef3 c\u00e1c ch\u00ednh s\u00e1ch truy c\u1eadp \u0111\u1eb7c quy\u1ec1n. \u0110\u00e2y l\u00e0 c\u00e1ch gi\u1ea3m thi\u1ec3u r\u1ee7i ro ngay c\u1ea3 khi m\u1ed9t th\u00e0nh ph\u1ea7n truy c\u1eadp t\u1eeb xa b\u1ea5t ng\u1edd ph\u00e1t sinh l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng.<\/p>\n<ul>\n<li><em><strong>VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb Check Point v\u00e0 BleepingComputer<\/em><\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>Check Point ng\u00e0y 08\/06\/2026 \u0111\u00e3 ph\u00e1t h\u00e0nh c\u1ea3nh b\u00e1o kh\u1ea9n v\u1ec1 CVE-2026-50751, m\u1ed9t l\u1ed7 h\u1ed5ng b\u1ecf qua x\u00e1c th\u1ef1c nghi\u00eam tr\u1ecdng trong c\u00e1c tri\u1ec3n khai Remote Access VPN v\u00e0 Mobile Access c\u00f2n s\u1eed d\u1ee5ng giao th\u1ee9c trao \u0111\u1ed5i kh\u00f3a IKEv1 \u0111\u00e3 l\u1ed7i th\u1eddi. Theo h\u00e3ng, l\u1ed7 h\u1ed5ng \u0111ang b\u1ecb khai th\u00e1c th\u1ef1c t\u1ebf v\u00e0 c\u00f3 [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1580,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[179,178,181,180,183,182],"class_list":["post-1581","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc","tag-check-point-vpn","tag-cve-2026-50751","tag-ikev1","tag-qilin-ransomware","tag-remote-access-vpn","tag-zero-day-vpn"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1581","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1581"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1581\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1580"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1581"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1581"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1581"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}