Security Advisory ID: NSKPSA-2026-001
Version: 1.0
Status: Published
Last Modified: March 12, 2026
Description
Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privileged user to trigger an integer overflow within the DLL injector, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation would require the Endpoint DLP module to be enabled in the client configuration. A successful exploit can potentially result in a denial-of-service for the local machine.
Affected Product(s) and Version(s)
Product Name: Netskope Client + Endpoint DLP
Affected Platform: Windows
Affected Versions: All versions below R135
CVE-ID(s)
CVE-2026-2809
Remediation
Netskope has released a security patch for the issue. Please see below
Netskope download Instructions – Download Netskope Client and Scripts – Netskope Support
Workaround
There are no workarounds available at this time.
General Security Best Practices
Netskope recommends using security hardening options available in the product and configuring them to harden the security of a Netskope tenant https://docs.netskope.com/en/secure-tenant-configuration-and-hardening/
Special Notes and Acknowledgement
Netskope credits Tom Brice for reporting this flaw.
Exploitation and Public Disclosures
Netskope is not aware of any active exploitation of the security issue.
Revision History
| Version | Date | Section | Notes |
|---|---|---|---|
| 1.0 | March 12, 2026 | Initial release |
Legal Disclaimer:
To the maximum extent permitted by applicable law, information provided in this notice is provided “as is” without warranty of any kind. Your use of the information in this notice or materials linked herein are at your own risk. This notice and all aspects of Netskope’s Product Security Incident Response Policy are subject to change without notice. Response is not guaranteed for any specific issue or class of issues. Your entitlements regarding warranties, support and maintenance, including vulnerabilities in any Netskope software or service, are governed solely by the applicable master agreement between Netskope and you. The statements in this notice do not modify, enlarge or otherwise amend any of your rights under the applicable master agreement, or create any additional warranties or commitments.
About Netskope
Netskope (NASDAQ: NTSK), a leader in modern security and networking for the cloud and AI era, addresses the needs of both security and networking teams by providing optimized access and real-time, context-based security for the AI ecosystem inclusive of agents, applications, tools, LLMs, people, devices, and data. Thousands of customers, including more than 30 of the Fortune 100, trust the Netskope One platform, its Zero Trust Engine, and its powerful NewEdge network to reduce risk and gain full visibility and control over cloud, AI, SaaS, web, and private applications – providing security and accelerating performance without trade-offs. Learn more at www.netskope.com, Netskope.ai, on LinkedIn, and Instagram.