PT-2026-97315 · Forcepoint · Security Engine

·

CVE-2026-12974

·

Published

2026-09-23

·

Updated

2026-09-23

CVSS v4.0

7.9

High

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions Forcepoint Security Engine (NGFW) versions 7.1.0 through 7.1.13 Forcepoint Security Engine (NGFW) versions 7.3.0 through 7.3.1 Forcepoint Security Engine (NGFW) version 7.3.3 Forcepoint Security Engine (NGFW) versions 7.4.0 through 7.4.1 Forcepoint Security Engine (NGFW) version 7.5.0
Description A security policy bypass exists in the software, allowing users to circumvent established security rules.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-12974

Affected Products

Security Engine