CVE-2026-12254 — Netskope Client Captive Portal WebView Persistence allowing SWG bypass issue
Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Netw…
Published: 2026-10-19 · CVSS: 6.4 · CVSS 4.0
Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via the Captive Portal using a rogue access point to either access malicious sites or exfiltrate data.The issue impacts all versions prior to R142
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7