CVE-2026-12254
CVE-2026-12254 · Netskope Client Captive Portal WebView Persistence allowing SWG bypass issue
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via the Captive Portal using a rogue access point to either access malicious sites or exfiltrate data.The issue impacts all versions prior to R142
CVSS 6.4 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
netskope client
- Versions
- ≥ 0, < 142: Affected (custom)
Update to 142