CVE-2025-14026 - CVE House
Back to Database
Status published Unknown CVE-2025-14026

Vulnerable Python version used in Forcepoint One DLP Client

Vulnerability Description

Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-14026

Credits & Attribution

No credits recorded in the NVD database.

References

More from Forcepoint

View All →
CVE-2025-2274
Stored Cross Site Scripting in Forcepoint Web Security
Medium 4.8
CVE-2025-2272
Privilege Escalation and Arbitrary code execution in F1E Endpoint
High 7.3
CVE-2025-12694
Local Privilege Escalation in VPN Client
High 8.5
CVE-2025-12690
Local Privilege Escalation in NGFW Engine
High 7.3
CVE-2024-9103
Persistent XSS in blocked messages
Medium 6.1

Affected Vendor

Affected Software

Forcepoint One Endpoint (F1E)
Vulnerable Versions:
23.11

Timeline

Official Publish: January 6th, 2026
Last Modified: January 6th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.