What’s Vulnerable › Vulnerabilities
CVE-2026-12254: Netskope Client Captive Portal WebView Persistence allowing SWG bypass issue
- Severity: medium (CVSS 6.4 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-19 · updated 2026-10-20
- Weakness: CWE-613
Description
Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via the Captive Portal using a rogue access point to either access malicious sites or exfiltrate data.The issue impacts all versions prior to R142
Affected products
- Netskope Inc. Netskope Client: before 142 — fixed in 142
How to fix
Upgrade to a fixed version: Netskope Inc. Netskope Client 142. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-12254 or the next vulnerability affects your stack