This issue affects Forcepoint Security Engine (NGFW): from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Forcepoint | Forcepoint Security Engine (NGFW) | unaffected |
|
No data.
No data.
No data available yet.
Vendor Solution
FlexEdge Secure SD-WAN Engine 7.1.14
Tracking
Sign in to view the affected projects.
No advisories yet.
Wed, 23 Sep 2026 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A Security Policy Bypass vulnerability exists in Forcepoint Security Engine (NGFW). This issue affects Forcepoint Security Engine (NGFW): from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0. | |
| Title | Security Policy Bypass in Forcepoint Security Engine (NGFW) | |
| First Time appeared |
Forcepoint
Forcepoint forcepoint Security Engine Ngfw |
|
| Weaknesses | CWE-1284 CWE-183 |
|
| CPEs | cpe:2.3:a:forcepoint:forcepoint_security_engine_ngfw_:*:*:*:*:*:*:*:* cpe:2.3:a:forcepoint:forcepoint_security_engine_ngfw_:7.3.2:*:*:*:*:*:*:* cpe:2.3:a:forcepoint:forcepoint_security_engine_ngfw_:7.3.3:*:*:*:*:*:*:* cpe:2.3:a:forcepoint:forcepoint_security_engine_ngfw_:7.5.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Forcepoint
Forcepoint forcepoint Security Engine Ngfw |
|
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: forcepoint
Published:
Updated: 2026-09-23T13:27:22.017Z
Reserved: 2026-06-23T10:14:07.181Z
Link: CVE-2026-12974
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.