kb.cert.org
https://kb.cert.org/vuls/id/420440 CVE-2025-14026
HIGH
Vulnerable Python version used in Forcepoint One DLP Client
Record summary
CVE-2025-14026 has a selected CVSS score of 7.8 (high).
Description
Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 6, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Forcepoint One Endpoint (F1E)Browse Forcepoint / Forcepoint One Endpoint (F1E) | CVE List | 23.11 | affected |
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-14026 support.forcepoint.com
https://support.forcepoint.com/s/article/000042256 kb.cert.org
https://www.kb.cert.org/vuls/id/420440