PT-2026-1435 · Python+1 · Python+1

CVE-2025-14026 · Publicado 2026-01-06 · Atualizado 2026-02-10

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Forcepoint One DLP Client versions 23.04.5642 and later

Description The Forcepoint One DLP Client includes a restricted version of Python 2.5.4 that limits the use of the ctypes library. The ctypes library is a foreign function interface (FFI) for Python, allowing calls to DLLs/shared libraries, memory allocation, and direct code execution. It has been demonstrated that these restrictions can be bypassed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-1104

CWE-1395

CWE-676

Identificadores relacionados

CVE-2025-14026

Produtos afetados

Forcepoint One Dlp Client

Python

Referências · 12

• https://t.me/cveNotify/147857 · Publicação no Telegram
• https://t.me/cveNotify/151620 · Publicação no Telegram
• https://twitter.com/ActiveITSolutns/status/2010711515255439850 · Publicação no Twitter
• https://kb.cert.org/vuls/id/420440 · Nota
• https://osv.dev/vulnerability/CVE-2025-14026 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2008568788141134042 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-14026 · Nota de Segurança
• https://t.me/pentestingnews/72141 · Publicação no Telegram
• https://twitter.com/Karma_X_Inc/status/2008775486059450740 · Publicação no Twitter
• https://support.forcepoint.com/s/article/000042256 · Nota
• https://twitter.com/CVEnew/status/2008558928427180072 · Publicação no Twitter
• https://twitter.com/ThreatSynop/status/2008810051335508122 · Publicação no Twitter