[ CVE-2026-12254 · Published 19 Oct 2026 ]
Vulnerability in Netskope Inc. Netskope Client
CVSS 6.4
EPSS <1%No fix listed yet
[ Description ]Official description
Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via the Captive Portal using a rogue access point to either access malicious sites or exfiltrate data.The issue impacts all versions prior to R142
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.