Forcepoint - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/forcepoint/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 23 Sep 2026 19:49:59 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSecurity Policy Bypass in Forcepoint Security Engine (NGFW)https://feed.craftedsignal.io/briefs/2026-09-forcepoint-ngfw-bypass/Wed, 23 Sep 2026 19:49:59 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-forcepoint-ngfw-bypass/Forcepoint has disclosed CVE-2026-12974, a security policy bypass vulnerability affecting multiple versions of the Forcepoint Security Engine (NGFW) that requires urgent administrative review and patching.Forcepoint has released a security advisory concerning a critical security policy bypass vulnerability, identified as CVE-2026-12974, affecting the Forcepoint Security Engine (NGFW). The vulnerability impacts a range of software versions, specifically 7.1.0 to 7.1.13, 7.3.0 to 7.3.1, 7.33, 7.4.0 to 7.4.1, and 7.5.0. This flaw allows unauthorized modification or evasion of established network security policies enforced by the NGFW. Because the NGFW is a core component of perimeter and internal network traffic control, successful exploitation could permit attackers to bypass access controls, exfiltrate data, or facilitate lateral movement within the network. Defenders should immediately verify their NGFW version deployment and review the official Forcepoint support portal for relevant patches and remediation guidance.

Impact

Successful exploitation of CVE-2026-12974 enables unauthorized parties to bypass security policies enforced by Forcepoint Security Engine (NGFW). If left unpatched, this vulnerability could compromise network segmentation, expose internal assets, or allow attackers to bypass traffic filtering rules, potentially leading to unauthorized data access or network infiltration.

Recommendation

  • Immediately audit your environment for the affected Forcepoint Security Engine (NGFW) versions listed in this brief.
  • Review the official Forcepoint Security Advisory (CVE-2026-12974) via the Forcepoint Support Hub for available firmware updates and specific configuration workarounds.
  • Prioritize patching for internet-facing NGFW deployments that enforce critical perimeter security policies.
  • Monitor NGFW administrative logs for unauthorized or unexpected policy changes that may indicate exploitation attempts.
]]>highadvisoryvulnerabilitynetwork-securitypatch-management