CVE-2025-12690

7.3 highEPSS 0.1%

High (7.3) in forcepoint next generation firewall. EPSS 0.1% chance of exploitation in the next 30 days.

Execution with unnecessary privileges in Forcepoint NGFW Engine allows local privilege escalation.This issue affects NGFW Engine through 6.10.19, through 7.3.0, through 7.2.4, through 7.1.10.

Severity

CVSS 4.0

7.3 high

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-250
Published: 2026-03-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

forcepoint:next_generation_firewall

References

https://support.forcepoint.com/s/article/Security-Advisory-Local-Privilege-Escalation-in-NGFW-Engine

Check your stack JSON