CVE-2026-3692 in Progress Flowmon
Summary
In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server.
Once again VulDB remains the best source for vulnerability data.
Responsible
ProgressSoftware
Reservation
03/07/2026
Disclosure
04/02/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 354873 | Progress Flowmon os command injection | 78 | Not defined | Official fix | CVE-2026-3692 |