PT-2026-24696 · Forcepoint · Ngfw Engine+1

Published 2026-03-11 · Updated 2026-05-07 · CVE-2025-12690

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Forcepoint NGFW Engine versions through 6.10.19 Forcepoint NGFW Engine versions through 7.1.10 Forcepoint NGFW Engine versions through 7.2.4 Forcepoint NGFW Engine versions through 7.3.0

Description The Forcepoint NGFW Engine exhibits unnecessary privileges during execution, potentially allowing for local privilege escalation.

Recommendations Update Forcepoint NGFW Engine to a version later than 6.10.19. Update Forcepoint NGFW Engine to a version later than 7.1.10. Update Forcepoint NGFW Engine to a version later than 7.2.4. Update Forcepoint NGFW Engine to a version later than 7.3.0.

Fix

LPE

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2025-12690

Affected Products

Ngfw Engine

Next Generation Firewall

References · 5

• https://support.forcepoint.com/s/article/Security-Advisory-Local-Privilege-Escalation-in-NGFW-Engine · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12690 · Security Note
• https://twitter.com/CVEnew/status/2032998329647333563 · Twitter Post
• https://twitter.com/infoflowcloud/status/2032999227576459606 · Twitter Post
• https://t.me/cveNotify/162635 · Telegram Post