Vulnerability · Published Jun 17, 2026 · Assigned by Netskope

CVE-2025-15641Netskope Client Exposed IOCTL with Insufficient Access Controls

Medium 6.8

In plain English

A medium-severity security flaw in Netskope Client from Netskope. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).

Severity (CVSS 4.0)6.8Medium

Exploit odds (30 days)0.2%top 94.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Netskope was notified about a potential gap in its Netskope Client for Windows systems where a malicious insider with administrative privileges can potentially tamper with the customer IOCTL by sending crafted IOCTL requests to the driver. A successful exploit can result in the bypassing of all anti-tampering protections for the NSClient.Affected Product(s) and Version(s) * Product Name: Netskope Client * Affected Platform: Windows * Affected Version: All version below R138

Affected products (as reported)

Vendor	Product	Versions
Netskope	Netskope Client	0 – before 138

Weakness: CWE-782 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

References

https://www.netskope.com/resources/netskope-resources/netskope-security-advisory-nskpsa-2025-007