CVE-2026-2737 in Flowmon

Sumário (Inglês)

A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsável

ProgressSoftware

Reservar

19/02/2026

Divulgação

02/04/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
354872	Progress Flowmon Link Script de Site Cruzado	79	Não definido	Correção oficial	CVE-2026-2737

Fontes

• MITRE
• NVD
• CVE Details