CVE-2026-12254

EUVD-2026-104411
Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via the Captive Portal using a rogue access point to either access malicious sites or exfiltrate data.The issue impacts all versions prior to R142
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NetskopeCNA
6.4 MEDIUM
NETWORK
LOW
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 14.17%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
netskopenetskope
𝑥
< 142
CNA