CVE-2026-110390

medium

Description

Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117872

https://community.flexera.com/s/article/Flexera-Beacon-security-hotfix-IOK-2107311

https://community.flexera.com/s/article/Flexera-Beacon-Security-Advisory-CVE-2026-110390

Details

Source: Mitre, NVD

Published: 2026-11-05

Updated: 2026-11-05

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

CVSS v4

Base Score: 6.9

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N