Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-8079

Unintended limited set of actions with elevated privileges may be performed during PDF generation in Progress Flowmon

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in operations being performed with the privileges of another user, potentially leading to unauthorized access to sensitive data and unintended modifications to system configuration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Flowmon

Default version status: affected

  • Flowmon 12 versions prior to 12.5.9affected
  • Flowmon 13 versions prior to 13.0.11affected

References