CVE-2023-26291: Forcepoint Cloud Security Gateway

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_form.mhtml modules), Forcepoint Web Security Portal on Hybrid (login_form.mhtml modules) allows Reflected XSS.This issue affects Cloud Security Gateway (CSG): before 03/29/2023; Web Security: before 03/29/2023.

Affected products

• Forcepoint Cloud Security Gateway: before 2023-03-29 (fixed in 2023-03-29)
• Forcepoint Web Security: before 2023-03-29 (fixed in 2023-03-29)

Published 2023-03-29. Last modified 2026-06-17.