CVE-2026-110390FlexNet Beacon Missing Authentication Vulnerability

Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).

6.9 MEDIUMEPSS 0.40%Not in KEVNVD: Received

Last updated: 2026-11-05 23:16 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
6.9	MEDIUM	4.0flexera (CNA)	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Details

CVE ID: CVE-2026-110390
Status: Received
Assigner (CNA): flexera
Published: Nov 5, 2026
Last modified: 2026-11-05 23:16 UTC
Weaknesses: CWE-306 · Missing authentication for critical function
CWE-497 · Exposure of sensitive system information to an unauthorized control sphere

Sources

NVD
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-09 08:15 UTC.