CVE-2025-14026

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-14026", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "state": "PUBLISHED", "assignerShortName": "certcc", "dateReserved": "2025-12-04T13:44:38.515Z", "datePublished": "2026-01-06T14:45:29.207Z", "dateUpdated": "2026-01-06T16:04:41.042Z"}, "containers": {"cna": {"title": "Vulnerable Python version used in Forcepoint One DLP Client", "descriptions": [{"lang": "en", "value": "Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed."}], "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Forcepoint", "product": "Forcepoint One Endpoint (F1E)", "versions": [{"status": "affected", "version": "23.11"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-1104 Use of Unmaintained Third-Party Components"}]}, {"descriptions": [{"lang": "en", "description": "CWE-1395 Dependency on a Vulnerable Third-Party Component"}]}, {"descriptions": [{"lang": "en", "description": "CWE-676 Use of Potentially Dangerous Function"}]}], "references": [{"url": "https://support.forcepoint.com/s/article/000042256"}, {"url": "https://kb.cert.org/vuls/id/420440"}], "x_generator": {"engine": "VINCE 3.0.31", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2025-14026"}, "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-01-06T14:46:30.519Z"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-01-06T15:19:38.095565Z", "id": "CVE-2025-14026", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-06T15:49:19.033Z"}}, {"title": "CVE Program Container", "references": [{"url": "https://www.kb.cert.org/vuls/id/420440"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-01-06T16:04:41.042Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-14026", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-06T15:19:38.095565Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1104", "description": "CWE-1104 Use of Unmaintained Third Party Components"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1395", "description": "CWE-1395 Dependency on Vulnerable Third-Party Component"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-676", "description": "CWE-676 Use of Potentially Dangerous Function"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-06T15:20:24.266Z"}}], "cna": {"title": "Vulnerable Python version used in Forcepoint One DLP Client", "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Forcepoint", "product": "Forcepoint One Endpoint (F1E)", "versions": [{"status": "affected", "version": "23.11"}]}], "references": [{"url": "https://support.forcepoint.com/s/article/000042256"}, {"url": "https://kb.cert.org/vuls/id/420440"}], "x_generator": {"env": "prod", "engine": "VINCE 3.0.31", "origin": "https://cveawg.mitre.org/api/cve/CVE-2025-14026"}, "descriptions": [{"lang": "en", "value": "Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-1104 Use of Unmaintained Third-Party Components"}]}, {"descriptions": [{"lang": "en", "description": "CWE-1395 Dependency on a Vulnerable Third-Party Component"}]}, {"descriptions": [{"lang": "en", "description": "CWE-676 Use of Potentially Dangerous Function"}]}], "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-01-06T14:46:30.519Z"}}}, "cveMetadata": {"cveId": "CVE-2025-14026", "state": "PUBLISHED", "dateUpdated": "2026-01-06T15:49:19.033Z", "dateReserved": "2025-12-04T13:44:38.515Z", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "datePublished": "2026-01-06T14:45:29.207Z", "assignerShortName": "certcc"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Forcepoint One Endpoint (F1E)", "vendor": "Forcepoint", "versions": [{"status": "affected", "version": "23.11"}]}], "source": "cret@cert.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:forcepoint:one_data_loss_prevention:23.04.5642:*:*:*:*:*:*:*", "matchCriteriaId": "0F50374A-170E-4EBF-9966-3604003FB87F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed."}, {"lang": "es", "value": "Cliente Forcepoint One DLP, versi\u00f3n 23.04.5642 (y posiblemente versiones m\u00e1s recientes), incluye una versi\u00f3n restringida de Python 2.5.4 que impide el uso de la biblioteca ctypes. ctypes es una interfaz de funci\u00f3n externa (FFI) para Python, lo que permite llamadas a DLLs/bibliotecas compartidas, asignaci\u00f3n de memoria y ejecuci\u00f3n directa de c\u00f3digo. Se demostr\u00f3 que estas restricciones podr\u00edan ser eludidas."}], "id": "CVE-2025-14026", "lastModified": "2026-06-17T08:35:11.813", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-14026", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-06T15:19:38.095565Z", "version": "2.0.3"}}]}, "published": "2026-01-06T15:15:42.057", "references": [{"source": "cret@cert.org", "tags": ["Third Party Advisory"], "url": "https://kb.cert.org/vuls/id/420440"}, {"source": "cret@cert.org", "tags": ["Permissions Required"], "url": "https://support.forcepoint.com/s/article/000042256"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://www.kb.cert.org/vuls/id/420440"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"created": "2026-01-07T10:36:26.378898+00:00", "updated": "2026-01-07T10:36:26.378924+00:00", "vendors": ["forcepoint", "forcepoint$PRODUCT$one_endpoint"]}