CVE-2025-12690Disclosure(forcepoint / next_generation_firewall)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Execution with unnecessary privileges in Forcepoint NGFW Engine allows local privilege escalation.This issue affects NGFW Engine through 6.10.19, through 7.3.0, through 7.2.4, through 7.1.10.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-250

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • next_generation_firewall

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
next_generation_firewall

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-15: 2Technical Details · 2026-03-15: 203-15
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2025-12690 Execution with unnecessary privileges in Forcepoint NGFW Engine allows local privilege escalation.This issue affects NGFW Engine through 6.10.19, through 7.3.0, throu… https://www.cve.org/CVERecord?id=CVE-2025-12690 ----- Traducción: CVE-2025-12690 Eje… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2025‑12690, a local privilege escalation vulnerability in Forcepoint NGFW Engine, and links to the official CVE record.

    00000178
    57 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-12690 Execution with unnecessary privileges in Forcepoint NGFW Engine allows local privilege escalation.This issue affects NGFW Engine through 6.10.19, through 7.3.0, throu… https://www.cve.org/CVERecord?id=CVE-2025-12690

    Post summary

    The statement serves as a brief disclosure of CVE-2025-12690, highlighting a local privilege escalation vulnerability in Forcepoint NGFW Engine across specified versions.

    00000283
    56.7K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appforcepointnext_generation_firewall---
Appforcepointnext_generation_firewall7.3.0--

Explore more