CVE-2026-115740
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the file Prefix parameter in the OpenEventEvidenceFile.do endpoint accepts arbitrary UNC paths without validation. The server-side code attempts to open the specified file path, causing Windows to resolve the hostname and initiate SMB authentication to the attacker-controlled host.
| CWE | CWE-918 |
| Vendor | trellix |
| Product | dlp on-prem extensions |
| Published | Nov 5, 2026 |
| Last Updated | Nov 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for trellix dlp on-prem extensions
Be the first to know when new medium vulnerabilities affecting trellix dlp on-prem extensions are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Trellix / DLP on-prem extensions
11.13.1 and earlier