CVE-2026-2737 — Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web application
A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently tr…
Published: 2026-04-02 · CVSS: 8.5 · CVSS 4.0
A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7