CVE-2026-12974
Awaiting Analysis Awaiting Analysis - Queue

Security Policy Bypass in Forcepoint Security Engine NGFW

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: Forcepoint

Description
A Security Policy Bypass vulnerability exists in Forcepoint Security Engine (NGFW). This issue affects Forcepoint Security Engine (NGFW): from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-23
Last Modified
2026-09-23
Generated
2026-09-24
AI Q&A
2026-09-23
EPSS Evaluated
N/A
NVD
CVE-2026-12974
EUVD
EUVD-2026-85292

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
forcepoint security_engine From 7.1.0 (inc) to 7.1.13 (inc)
forcepoint security_engine From 7.3.0 (inc) to 7.3.1 (inc)
forcepoint security_engine 7.3.3
forcepoint security_engine From 7.4.0 (inc) to 7.4.1 (inc)
forcepoint security_engine 7.5.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1284 The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
CWE-183 The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are explicitly allowed by policy because the inputs are assumed to be safe, but the list is too permissive - that is, it allows an input that is unsafe, leading to resultant weaknesses.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Security Policy Bypass vulnerability in Forcepoint Security Engine (NGFW). It allows unauthorized bypass of security policies due to improper enforcement in versions 7.1.0 through 7.1.13, 7.3.0 through 7.3.1, 7.3.3, 7.4.0 through 7.4.1, and 7.5.0.

Detection Guidance

Detection methods or specific commands for this vulnerability are not provided in the available CVE context. Review Forcepoint Security Engine (NGFW) logs for policy enforcement failures or unauthorized access attempts. Check for versions 7.1.0-7.1.13, 7.3.0-7.3.1, 7.3.3, 7.4.0-7.4.1, or 7.5.0.

Impact Analysis

An attacker could exploit this to bypass security controls, potentially gaining unauthorized access to network resources or sensitive data. This may lead to data breaches, unauthorized system access, or disruption of network services.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with standards like GDPR or HIPAA. The vulnerability is a Security Policy Bypass in Forcepoint Security Engine (NGFW), which could potentially allow unauthorized access or data exfiltration, indirectly affecting compliance if exploited.

Mitigation Strategies

Update Forcepoint Security Engine (NGFW) to a version that is not affected by this vulnerability. Affected versions include 7.1.0 through 7.1.13, 7.3.0 through 7.3.1, 7.3.3, 7.4.0 through 7.4.1, and 7.5.0. Check the vendor's advisory for patches or updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12974. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart