Is the Symantec DLP vulnerable to CVE-2026-8286

Products

• Data Loss Prevention Core Package

Issue/Introduction

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.

Resolution

The Data Loss Prevention (DLP) solution is not vulnerable to issues involving opportunistic TLS upgrades (STARTTLS) in libcurl.

DLP Endpoint Agent: Operates strictly over HTTPS. The agent does not configure or rely on CURLOPT_USE_SSL / CURLUSESSL_* flags, and it does not utilize email (SMTP, IMAP, POP3), FTP, or LDAP protocols for transport. Consequently, the affected protocol paths are never initialized.

DLP Detection Servers: While detection servers process protocols such as email and FTP in the course of traffic inspection, they do not utilize the affected libcurl components for handling these data flows.

Based on this architecture, neither the endpoint agents nor the detection servers are exposed to this vulnerability. No remediation or configuration changes are required.