Vulnerabilidades de Forcepoint
CVEs publicadas que afetam produtos de Forcepoint: 5 registro(s), com severidade, exploração e correções.
Next Generation Firewall 1Web Security 1Vpn Client 1One Data Loss Prevention 1Web Security (On-Prem) 1NGFW Engine 1Forcepoint One Endpoint (F1E) 1F1E mac 1
CVE-2026-11970
Média · 4.8
CWE-754 13/08/2026
Improper Check for Unusual or Exceptional Conditions em Forcepoint F1E mac
This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758.
CVE-2025-12694
Alta · 7.8
CWE-250 04/06/2026
Local Privilege Escalation in VPN Client
A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: versions 6.11.3 and prior.
CVE-2025-2274
Média · 6.1
CWE-79 16/03/2026
Stored Cross Site Scripting in Forcepoint Web Security
Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6.
CVE-2025-12690
Alta · 7.8
CWE-250 11/03/2026
Local Privilege Escalation in NGFW Engine
Execution with unnecessary privileges in Forcepoint NGFW Engine allows local privilege escalation.This issue affects NGFW Engine through 6.10.19, through 7.3.0, through 7.2.4, through 7.1.10.
CVE-2025-14026
Alta · 7.8
06/01/2026
Vulnerable Python version used in Forcepoint One DLP Client
Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed.