CVE-2026-8079
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
In Progress Flowmon versions prior to 12.5.9 and 13.0.11, an authenticated low-privileged user can craft a request during PDF generation, leading to operations performed with another user's privileges. This may result in unauthorized access to sensitive data and unintended system configuration changes.
Risk Assessment
The risk includes potential leakage of confidential data and unauthorized configuration modifications, compromising the integrity and confidentiality of the network monitoring system.
Recommendation
Immediately upgrade Progress Flowmon to version 12.5.9 or 13.0.11, which contain the fix for this vulnerability.
Other vulnerabilities in Progress Flowmon
See all- CVE-2026-3692High
In Progress Flowmon versions prior to 12.5.8, an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server.
- CVE-2026-2737Medium
A vulnerability in Progress Flowmon versions prior to 12.5.8 and 13.0.6 allows an attacker to trick an administrator into clicking a malicious link, potentially triggering unintended actions within their authenticated web session.
Original NVD description (English source)
In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in operations being performed with the privileges of another user, potentially leading to unauthorized access to sensitive data and unintended modifications to system configuration.