A security policy bypass flaw allows an attacker to circumvent configured firewall rules, potentially granting unauthorized network access. The vulnerability falls under CWE‑1284 and may also involve CWE‑183 mechanisms, indicating that manipulated inputs could lead to configuration or command processing errors.

Forcepoint Security Engine (NGFW) machines running versions 7.1.0 through 7.1.13, 7.3.0 through 7.3.1, 7.3.3, 7.4.0 through 7.4.1, and 7.5.0 are vulnerable. The vendor recommends upgrading to the latest supported firmware such as FlexEdge Secure SD‑WAN Engine 7.1.14 or Network Security Platform Security Engine 7.3.4, 7.4.2, or 7.5.1.

The CVSS score of 7.9 denotes a high impact on confidentiality, integrity, and availability, enabling attackers to bypass network security controls. No EPSS data is available, so the exploitation probability remains undetermined, and the vulnerability is not listed in CISA's KEV catalog. Although the official description does not detail the attack vector, it is inferred that the flaw can be triggered remotely via crafted traffic sent to the NGFW.