CVE-2024-7401: Netskope

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Netskope was notified about a security gap in Netskope Client enrollment process where NSClient is using a static token “Orgkey” as authentication parameter. Since this is a static token, if leaked, cannot be rotated or revoked. A malicious actor can use this token to enroll NSClient from a customer’s tenant and impersonate a user.

Affected products

• Netskope Netskope: any version

Published 2024-08-26. Last modified 2026-06-17.