CVE-2026-3692 : faille élevée progress flowmon (CVSS 8.8)

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server.

Sévérité

Élevée (CVSS 8.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

2 avr. 2026

Dernière mise à jour

6 juil. 2026

• progress flowmon

• Fiche CVE-2026-3692 sur le NVD (NIST)
• community.progress.com/s/article/CVE-2026-3692-Progress-Flowmon