Improper Security Control in Forcepoint One Endpoint on macOS
CVE-2026-11970

4.8MEDIUM

Key Information:

Vendor

Forcepoint

Status
F1e Mac
Vendor
CVE Published:
13 August 2026

What is CVE-2026-11970?

This vulnerability in Forcepoint One Endpoint for macOS allows non-admin users to disable the SafariExtension, effectively circumventing Data Loss Prevention (DLP) measures. This issue could lead to significant security risks as it permits unauthorized modifications to security protocols, affecting data integrity and confidentiality.

Affected Version(s)

F1E mac MacOS 0

References

https://forcepoint2.my.site.com/ForcepointCustomerHub/s/a...

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Manish Tripathy
.