CVE-2026-12974 — Security Policy Bypass in Forcepoint Security Engine (NGFW)

CVE-2026-12974

Security Policy Bypass in Forcepoint Security Engine (NGFW) PUBLISHED

Description (CNA)

A Security Policy Bypass vulnerability exists in Forcepoint Security Engine (NGFW). This issue affects Forcepoint Security Engine (NGFW): from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0.

Affected (CNA)

Vendor / product	Versions
Forcepoint / Forcepoint Security Engine (NGFW)	affected 7.1.0 through 7.1.13; affected 7.3.0 through 7.3.1; affected 7.3.3; affected 7.4.0 through 7.4.1; affected 7.5.0; unaffected 7.3.2

CWE

CWE-1284, CWE-183

References

https://support.forcepoint.com/s/article/Security-Advisory-Security-Policy-Bypass-in-Forcepoint-Security-Engine-NGFW-CVE-2026-12974

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.