Medium severity · published Apr 29, 2026
CVE-2026-2810
Endpoint DLP Driver Out-of-Bounds Read
6.8
CVSS
0.1%
EPSS
No
On KEV
Description
Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an out-of-bounds read within a driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation would require the Endpoint DLP module to be enabled in the client configuration. A successful exploit can potentially result in a denial-of-service for the local machine.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Client · Netskope
before 129.1.8,132.0.23,135.1.0,136.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-2810
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-2810
support.netskope.com
https://support.netskope.com/s/article/Netskope-Security-Advisory-NSKPSA-2026-002-Netskope-Endpoint-DLP-Driver-Security-Advisory
www.netskope.com
https://www.netskope.com/resources/netskope-resources/netskope-security-advisory-nskpsa-2026-002
