Skip to content
OpenAdvisories
Medium · 6.4 CVE-2026-12254 EUVD-2026-104411GHSA-4fcp-xcp9-9vm6

Netskope Client Captive Portal WebView Persistence allowing SWG bypass issue

Published Oct 19, 2026 · Updated Oct 21, 2026 · Assigned by Netskope

Description

Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via the Captive Portal using a rogue access point to either access malicious sites or exfiltrate data.The issue impacts all versions prior to R142

Affected products

VendorProductAffectedFixed
Netskope Netskope Client < 142 142

References