CVE-2026-8079: falha de alta gravidade em Progress Software Flowmon
Unintended limited set of actions with elevated privileges may be performed during PDF generation in Progress Flowmon
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.3%
In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in operations being performed with the privileges of another user, potentially leading to unauthorized access to sensitive data and unintended modifications to system configuration.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Produtos afetados
Progress Software · FlowmonCVEs relacionadas — Progress Software Flowmon
No mesmo produto, das mais perigosas para as menos.
CVE-2024-2389CRITICALFlowmon Unauthenticated Command Injection VulnerabilityEPSS 93.0%CVE-2026-3692HIGHUnintended command execution during report generation in Progress FlowmonEPSS 0.4%CVE-2025-10239HIGHUnintended command execution via troubleshooting scripts in Progress FlowmonEPSS 0.4%CVE-2025-10240HIGHPossibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web applicationEPSS 0.3%CVE-2026-2737HIGHPossibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web applicationEPSS 0.2%CVE-2025-11906MEDIUMPrivilege escalation via writable configuration files in Progress FlowmonEPSS 0.1%