Vulnerability in Forcepoint Security Engine (NGFW)

[ Description ]Official description

A Security Policy Bypass vulnerability exists in Forcepoint Security Engine (NGFW). This issue affects Forcepoint Security Engine (NGFW): from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund23 Sep 2026WID-SEC-2026-3549

  Forcepoint Next Generation Firewall: Vulnerability allows bypassing security measures Translated from German

  CVE-2026-12974

[ References ]References

• support.forcepoint.com/s/article/Security-Advisory-Security-Policy-Bypass-in-Forcepoint…