Hard-coded Cryptographic Key Vulnerability in Trellix DLP On-Prem Extensions
CVE-2026-115739

6MEDIUM

Key Information:

Vendor

Trellix

Status
Dlp On-prem Extensions
Vendor
CVE Published:
5 November 2026

What is CVE-2026-115739?

A vulnerability exists in Trellix DLP On-Prem Extensions that stems from a hard-coded cryptographic key. This flaw enables remote attackers to gain unauthorized access, allowing them to decrypt sensitive credentials and evidence files. Organizations using version 11.13.1 and earlier are particularly at risk, as the compromised keys could facilitate data breaches and compromise the integrity of stored information.

Affected Version(s)

DLP on-prem extensions 11.13.1 and earlier

References

https://support.trellix.com/s/article/000015949

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.