CVE-2026-12254
Received Received - Intake

Netskope Client Captive Portal Bypass Vulnerability

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: Netskope

Description
Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via the Captive Portal using a rogue access point to either access malicious sites or exfiltrate data.The issue impacts all versions prior to R142

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-12254
EUVD
EUVD-2026-104411

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Netskope Inc. Netskope Client 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-613 According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves Netskope's agent (NSClient) failing to properly close a Captive Portal when switching to a network with internet connectivity. This allows the Captive Portal to remain open, potentially enabling abuse through a rogue access point to access malicious sites or exfiltrate data.

Impact Analysis

The vulnerability could allow attackers to exploit the open Captive Portal via a rogue access point, leading to unauthorized access to malicious websites or data exfiltration from your system. This poses risks to data security and privacy.

Compliance Impact

This vulnerability could lead to data breaches or unauthorized data access, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations using affected Netskope Client versions may face legal and regulatory penalties.

Mitigation Strategies

Upgrade Netskope Client to version R142 or later to address the captive portal issue and prevent abuse via rogue access points.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12254. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart