Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
#VulnerabilityReport #ArbitraryCodeExecution CVE-2025-14026: Forcepoint DLP Flaw Lets Attackers Unchain Restricted Python https://securityonline.info/cve-2025-14026-forcepoint-dlp-flaw-lets-attackers-unchain-restricted-python/?utm_source=dlvr.it&utm_medium=twitter
Post summary
CVE‑2025‑14026 is a Forcepoint DLP vulnerability that allows attackers to achieve arbitrary code execution by bypassing Python restrictions.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | forcepoint | one_data_loss_prevention | 23.04.5642 | - | - |