Forcepoint vulnerabilities

CVEs per yearBy the year they were published

1. 20197
2. 20223
3. 20234
4. 20244
5. 20252
6. 20266

Newest CVEs

• CVE-2026-12974

  Security Policy Bypass in Forcepoint Security Engine (NGFW)

  Forcepoint · Forcepoint Security Engine (NGFW)

  High7.9
• CVE-2026-11970

  This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before…

  Forcepoint · F1E mac

  Medium4.8
• CVE-2025-12694

  Local Privilege Escalation in VPN Client

  Forcepoint · VPN Client

  High8.5
• CVE-2025-2274

  Stored Cross Site Scripting in Forcepoint Web Security

  Forcepoint · Web Security (On-Prem)

  Medium4.8
• CVE-2025-12690

  Local Privilege Escalation in NGFW Engine

  Forcepoint · NGFW Engine

  High7.3
• CVE-2025-14026

  Vulnerable Python version used in Forcepoint One DLP Client

  Forcepoint · Forcepoint One Endpoint (F1E)

  High7.8
• CVE-2025-2272

  Privilege Escalation and Arbitrary code execution in F1E Endpoint

  Forcepoint · FIE Endpoint

  High7.3
• CVE-2024-9103

  Persistent XSS in blocked messages

  Forcepoint · Email Security

  Medium6.1
• CVE-2024-2166

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email Security (Real Time Monitor modules)…

  Forcepoint · Email Security

  High8.8
• CVE-2023-6452

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction Viewer) allows…

  Forcepoint · Web Security

  Critical9.6