ZDI-CAN-28719 MEDIUM 5.3 Upcoming Feb 06, 2026

DriveLock

DriveLock is a German endpoint security and data protection company known for device control and encryption solutions. The vulnerability has a network-based attack vector requiring no authentication or user interaction, but the impact is limited to low-level information disclosure with no integrity or availability impact. Security teams should monitor for this advisory's publication around the June 2026 vendor deadline and assess whether their DriveLock deployments are exposed to unauthenticated network access.

Advisory Details
Researcher stuxxn
Reported February 06, 2026
Deadline June 06, 2026 51d
CVSS Vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy