CVE-2026-2513: Progress Flowmon Anomaly Detection System

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.

Affected products

• Progress Flowmon Anomaly Detection System: from 12.0.0, before 12.5.5 (fixed in 12.5.5); from 13.0.0, before 13.0.3 (fixed in 13.0.3)

Published 2026-03-12. Last modified 2026-09-03.