CVE-2026-12254
Netskope Client Captive Portal WebView Persistence allowing SWG bypass issue
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via the Captive Portal using a rogue access point to either access malicious sites or exfiltrate data.The issue impacts all versions prior to R142
| CWE | CWE-613 |
| Vendor | netskope inc. |
| Product | netskope client |
| Published | Oct 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for netskope inc. netskope client
Be the first to know when new unknown vulnerabilities affecting netskope inc. netskope client are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Netskope Inc. / Netskope Client
0 < 142
References
Credits
Loïc Croche (Independant security researcher)