Network Vulnerability in Netskope Agent Affects Data Security
CVE-2026-12254
6.4MEDIUM
What is CVE-2026-12254?
A potential security gap has been identified in the Netskope Client (NSClient) that may expose users to risks when connecting to Wi-Fi networks with a Captive Portal. When a device transitions from a Captive Portal to another network with existing internet access, the Captive Portal session doesn't terminate as expected. This oversight could allow malicious actors to exploit the Captive Portal, potentially leading to unauthorized access to harmful sites or unauthorized data exfiltration. The issue impacts all versions of NSClient prior to R142.
Affected Version(s)
Netskope Client Windows 0 < 142
References
CVSS V4
Score:
6.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Loïc Croche (Independant security researcher)