CVE-2026-11970 PUBLISHED

Assigner: forcepoint
Reserved: 11.06.2026 Published: 13.08.2026 Updated: 13.08.2026

This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758.

Metrics

CVSS 4.0

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
CVSS Score: 4.8

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Local	Confidentiality	None	Confidentiality	None
Attack Complexity	Low	Integrity	Low	Integrity	None
Attack Requirements	None	Availability	Low	Availability	None
Privileges Required	Low
User Interaction	None

CVSS 4.0

Product Status

Vendor	Forcepoint
Product	F1E mac
Versions	Default: unaffected affected from 0 to v26.04.5758 (excl.)

Credits

Manish Tripathy reporter

References

https://forcepoint2.my.site.com/ForcepointCustomerHub/s/article/Security-Advisory-Improper-Check-for-Unusual-or-Exceptional-Conditions-with-macOS-F1E-Endpoint-CVE-2026-11970

Problem Types

CWE-754: Improper Check for Unusual or Exceptional Conditions CWE

Impacts

CAPEC-22 Exploiting Trust in Client
CAPEC-207: Removing Important Client Functionality