CVE-2026-2809

Medium

Description

Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privileged user to trigger an integer overflow within the DLL Injector, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation would require the Endpoint DLP module to be enabled in the client configuration. A successful exploit can potentially result in a denial-of-service for the local machine.

SeverityMedium

CVSS6.7

Exploit probability—

ProductEndpoint DLP Module for Netskope Client

PublishedMar 17, 2026

First seenMar 17, 2026

Weakness typeCWE-190Integer overflow

How to fix

Update

Netskope Endpoint DLP Module for Netskope Client132.0.20, 135 or later

Vendor advisories

support.netskope.com/s/article/NSKPSA-2026-001-Endpoint-DLP-Driver-DLL-Injector-Integer-Overflow

Affected products

Product	Affected versions	Fixed in
Netskope Endpoint DLP Module for Netskope Client	v < 132.0.20, 135	132.0.20, 135

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.