Forcepoint Vulnerabilities and Affected Products
Vulnerabilities associated with Forcepoint One Endpoint (F1E).
Products
Clear product- Cloud Security Gateway (CSG)4 vulnerabilities
- Forcepoint Email Security4 vulnerabilities
- Web Security4 vulnerabilities
- Email Security2 vulnerabilities
- One Endpoint2 vulnerabilities
- Cloud Security Gateway1 vulnerability
- Data Loss Prevention (DLP)1 vulnerability
- Email Security with DLP enabled1 vulnerability
- email_security1 vulnerability
- F1E mac1 vulnerability
- FIE Endpoint1 vulnerability
- Forcepoint Next Generation Firewall1 vulnerability
- Forcepoint One Endpoint (F1E)1 vulnerability
- Forcepoint VPN Client for Windows1 vulnerability
- F|One SmartEdge Agent1 vulnerability
- Next Generation Firewall Security Management Center1 vulnerability
- NGFW Engine1 vulnerability
- NGFW Security Management Center1 vulnerability
- One Endpoint (F1E) with Policy Engine1 vulnerability
- VPN Client1 vulnerability
- Web Security (On-Prem)1 vulnerability
- Web Security Content Gateway1 vulnerability
- web_security1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-14026HIGH | Vulnerable Python version used in Forcepoint One DLP ClientForcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed. | CVSS7.8v3.1 | EPSS0.181% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |