CVE-2026-8079 - Unintended limited set of actions with elevated privileges may be performed during PDF generation in Progress Flowmon

Back Back to CVE browser

HIGH

Unintended limited set of actions with elevated privileges may be performed during PDF generation in Progress Flowmon

Published Jul 2, 2026

8.7

HIGH

CVSS 4.0

EPSS 0.32%

Description

In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in operations being performed with the privileges of another user, potentially leading to unauthorized access to sensitive data and unintended modifications to system configuration.

Affected products

Vendor Progress Software Product Flowmon Default
affected
- Version
  Flowmon 12 versions prior to 12.5.9
  Status
  affected
  Constraints
  -
- Version
  Flowmon 13 versions prior to 13.0.11
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Progress Software

Flowmon

affected

Version	Status	Constraints
Flowmon 12 versions prior to 12.5.9	affected	-
Flowmon 13 versions prior to 13.0.11	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

References (2)

https://community.progress.com/s/article/Flowmon-CVE-2026-8079
vendor-advisoryVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41375
Advisory

Link	Providers	Tags
https://community.progress.com/s/article/Flowmon-CVE-2026-8079		vendor-advisoryVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41375		Advisory