ZDI-CAN-28719
MEDIUM 5.3
Upcoming
Feb 06, 2026
DriveLock
DriveLock is a German endpoint security and data protection company known for device control and encryption solutions. The vulnerability has a network-based attack vector requiring no authentication or user interaction, but the impact is limited to low-level information disclosure with no integrity or availability impact. Security teams should monitor for this advisory's publication around the June 2026 vendor deadline and assess whether their DriveLock deployments are exposed to unauthenticated network access.
Advisory Details
Researcher
stuxxn
Reported
February 06, 2026
Deadline
June 06, 2026
51d
CVSS Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N