Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed.
References
| Link | Resource |
|---|---|
| https://kb.cert.org/vuls/id/420440 | Third Party Advisory |
| https://support.forcepoint.com/s/article/000042256 | Permissions Required |
| https://www.kb.cert.org/vuls/id/420440 | Third Party Advisory |
Configurations
History
10 Feb 2026, 19:31
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:forcepoint:one_data_loss_prevention:23.04.5642:*:*:*:*:*:*:* | |
| First Time |
Forcepoint one Data Loss Prevention
Forcepoint |
|
| References | () https://kb.cert.org/vuls/id/420440 - Third Party Advisory | |
| References | () https://support.forcepoint.com/s/article/000042256 - Permissions Required | |
| References | () https://www.kb.cert.org/vuls/id/420440 - Third Party Advisory | |
| CWE | NVD-CWE-noinfo |
06 Jan 2026, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
06 Jan 2026, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
06 Jan 2026, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-06 15:15
Updated : 2026-02-10 19:31
NVD link : CVE-2025-14026
Mitre link : CVE-2025-14026
CVE.ORG link : CVE-2025-14026
JSON object : View
Products Affected
forcepoint
- one_data_loss_prevention
CWE