1. Home
  2. CVE Database
  3. CVE-2026-8079
HIGH · 7.3

CVE-2026-8079

In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in oper...

Vulnerability Description

In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in operations being performed with the privileges of another user, potentially leading to unauthorized access to sensitive data and unintended modifications to system configuration.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
ProgressFlowmon>= 12.0.0, < 12.5.9

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2026-8079?

CVE-2026-8079 is a vulnerability with a CVSS score of 7.3 (HIGH). In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in oper...

How severe is CVE-2026-8079?

CVE-2026-8079 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-8079?

Check the references section above for vendor advisories and patch information. Affected products include: Progress Flowmon.