CVE-2025-14026

ÉLEVÉE 7.8CVE-2025-14026 · Published 06/01/2026 · updated 17/06/2026

En bref

CVE-2025-14026 est une vulnérabilité ÉLEVÉE (CVSS 7.8) touchant one data loss prevention (forcepoint).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.21%, plus élevée que 11.5% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
one data loss prevention forcepoint	`= 23.04.5642`	No fix yet

Description

Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed.

References

kb.cert.org/vuls/id/420440 · Third Party Advisory
support.forcepoint.com/s/article/000042256 · Permissions Required
kb.cert.org/vuls/id/420440 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free