The vulnerability allows an entity with local access to gain unnecessary privileges in the Forcepoint NGFW Engine, enabling a local privilege escalation. This can result in the attacker acquiring higher privileges on the device, as described by the vendor advisory.

Affected products include Forcepoint NGFW Engine. Versions affected are all releases up to and including 6.10.19, 7.1.10, 7.2.4, and 7.3.0, as indicated by the vendor’s reference list.

The CVSS score of 7.3 classifies it as a high‑severity flaw, but the EPSS score of less than 1% suggests a low probability of exploitation in the wild. Since the vulnerability requires local access, the attack vector is local, limiting exposure to the device’s operator or someone physically present. The flaw is not listed in the CISA KEV catalog. Exploitation would result in the attacker gaining higher privileges on the device.