Forcepoint
- Total products in the ecosystem
- 21
- Total vulnerabilities (90 days)
- 2
en
Verify to analyze this security profile
As of 10/22/2026, Forcepoint recorded 2 security vulnerabilities in the last 90 days across 2 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, F1E mac had the most security vulnerabilities in the Forcepoint ecosystem, with 1 vulnerabilities—approximately 50% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-12974Security Policy Bypass in Forcepoint Security Engine (NGFW)CVE-2026-11970CVE-2026-11970CVE-2025-12694Local Privilege Escalation in VPN ClientCVE-2025-2274Stored Cross Site Scripting in Forcepoint Web SecurityCVE-2025-12690Local Privilege Escalation in NGFW Engine| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-12974Security Policy Bypass in Forcepoint Security Engine (NGFW) | Exploitation statusNot exploited | FixYes | Affected productForcepoint Security Engine (NGFW) | Published09/23/2026 | SeverityHigh |
CVE-2026-11970CVE-2026-11970 | Exploitation statusNot exploited | FixYes | Affected productF1E mac | Published08/13/2026 | |
CVE-2025-12694Local Privilege Escalation in VPN Client | Exploitation statusNot exploited | FixYes | Affected productVPN Client | Published06/04/2026 | |
CVE-2025-2274Stored Cross Site Scripting in Forcepoint Web Security | Exploitation statusNot exploited | FixYes | Affected productWeb Security (On-Prem) | Published03/16/2026 | |
CVE-2025-12690Local Privilege Escalation in NGFW Engine | Exploitation statusNot exploited | FixYes | Affected productNGFW Engine | Published03/11/2026 | |
CVE-2025-14026Vulnerable Python version used in Forcepoint One DLP Client | Exploitation statusNot exploited | FixNo | Affected productForcepoint One Endpoint (F1E) | ||
CVE-2025-2272Privilege Escalation and Arbitrary code execution in F1E Endpoint | Exploitation statusNot exploited | FixYes | Affected productFIE Endpoint | Published | |
CVE-2024-9103Persistent XSS in blocked messages | Exploitation statusNot exploited | FixYes | Affected productEmail Security | Published03/24/2025 | |
CVE-2024-2166CVE-2024-2166 | Exploitation statusNot exploited | FixYes | Affected productEmail Security | Published09/04/2024 | |
CVE-2023-6452CVE-2023-6452 | Exploitation statusNot exploited | FixYes | Affected productWeb Security | Published08/22/2024 |
32 Results | Page 1 of 4
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |