CVE-2026-8079: Unintended limited set of actions with elevated privileges may be performed during PDF generation in Progress Flowmon
In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in operations being performed with the privileges of another user, potentially leading to unauthorized access to sensitive data and unintended modifications to system configuration.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress Flowmonto a version that resolves this vulnerability.Fixed in 12.5.9 - Upgrade
Upgrade
Progress Flowmonto a version that resolves this vulnerability.Fixed in 13.0.11
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8079?
CVE-2026-8079 has a high severity rating of 8.7.
How do I fix CVE-2026-8079?
To remediate CVE-2026-8079, upgrade Progress Flowmon to versions 12.5.9 or 13.0.11 or later.
What types of privileges are affected by CVE-2026-8079?
CVE-2026-8079 allows low-privileged users to perform actions with elevated privileges.
What could be the impact of CVE-2026-8079?
The impact of CVE-2026-8079 may include unauthorized access to sensitive data and operations.
Which versions of Progress Flowmon are vulnerable to CVE-2026-8079?
Progress Flowmon versions prior to 12.5.9 and 13.0.11 are vulnerable to CVE-2026-8079.