CVE-2026-8079: In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process

highCVSS 7.3CVE-2026-8079

In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in operations being performed with the privileges of another user, potentially leading to unauthorized access to sensitive data and unintended modifications to system configuration.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: high — CVSS 7.3
Published: 2026-07-02
Last updated: 2026-07-06
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-8079

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-80790.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-8079	coverage & exploitation status	NVD · CVE.org

Recent advisories for In Progress Flowmon

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

highCVE-2026-9272: In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exists whereby an …nvd · 2026-07-02

CVE-2026-8079: In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process

Details

Exploitation outlook

Referenced CVEs

Recent advisories for In Progress Flowmon

More from NVD Recent CVEs