Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-3692

Unintended command execution during report generation in Progress Flowmon

Description

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Flowmon

Default version status: affected

  • Flowmon 12 versions prior to 12.5.8affected

References