CVE-2026-3692 — Unintended command execution during report generation in Progress Flowmon

CVE-2026-3692

Unintended command execution during report generation in Progress Flowmon PUBLISHED

Description (CNA)

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server.

Affected (CNA)

Vendor / product	Versions
Progress Software / Flowmon	affected Flowmon 12 versions prior to 12.5.8

CWE

CWE-78

References

https://community.progress.com/s/article/CVE-2026-3692-Progress-Flowmon

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.