CVE-2025-11906 – Privilege escalation via writable configuration files in Progress Flowmon

CVE ID : CVE-2025-11906

Published : Oct. 30, 2025, 8:15 a.m. | 1 hour, 10 minutes ago

Description : A vulnerability exists in Progress Flowmon versions prior 12.5.6 where certain system configuration files have incorrect file permissions, allowing a user with access to the default flowmon system user account used for SSH access to potentially escalate privileges to root during service initialization.

Severity: 6.7 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…