CVE-2026-9272 — Possibility of unintended database operations when querying data related to detected anomalies in Progress Flowmon ADS

CVE-2026-9272

Possibility of unintended database operations when querying data related to detected anomalies in Progress Flowmon ADS PUBLISHED

Description (CNA)

In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exists whereby an adversary who is authenticated as a low-privileged user in the Anomaly Detection System (ADS) may send specially crafted requests that could result in unauthorized access to application data and its modification.

Affected (CNA)

Vendor / product	Versions
Progress Software / Flowmon ADS	affected Flowmon ADS 12 versions prior to 12.5.6; affected Flowmon ADS 13 versions prior to 13.0.5

CWE

CWE-89

References

https://community.progress.com/s/article/Flowmon-CVE-2026-9272

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.