CVE-2026-3692

Description

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server.

References

• https://community.progress.com/s/article/CVE-2026-3692-Progress-Flowmon