Data Loss Prevention and endpoint
CVE-2026-11970: This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension…
This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityMEDIUMCVSS 4.0 4.8
EPSS0.16%Chance of exploitation in 30 days
Public exploitNot tracked
FixAvailable
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| F1E mac (MacOS) 0 | v26.04.5758 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 11 Oct 2026.