Missing Authentication Vulnerability in FlexNet Beacon Component from Flexera
CVE-2026-110390

6.9MEDIUM

Key Information:

Vendor

Flexera

Status
Flexnet Beacon
Flexnet Manager Suite
Vendor
CVE Published:
5 November 2026

What is CVE-2026-110390?

The FlexNet Beacon component in Flexera One and FlexNet Manager Suite has a vulnerability due to missing authentication, allowing unauthenticated remote attackers to access sensitive Beacon policy and targeting information. This occurs when anonymous web server access is enabled by default, posing a significant risk of unauthorized data exposure.

Affected Version(s)

FlexNet Beacon Windows 0 < 26.4.1

FlexNet Manager Suite Windows 2026 R1 < 2026 R2

FlexNet Manager Suite Windows 2025 R2 < 2026 R1

References

https://community.flexera.com/s/article/Flexera-Beacon-Se...
vendor-advisory
https://community.flexera.com/s/article/Flexera-Beacon-se...
patch

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.