CVE-2026-110390
Received
Received - Intake
Missing Authentication in FlexNet Beacon Component
Vulnerability report for CVE-2026-110390, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-05
Last updated on: 2026-11-05
Assigner: Flexera Software LLC
Description
Description
Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Flexera | FlexNet Beacon | 0 |
| Flexera | FlexNet Manager Suite | 2026 R1 |
| Flexera | FlexNet Manager Suite | 2025 R2 |
| Flexera | FlexNet Manager Suite | 2025 R1 |
| Flexera | FlexNet Manager Suite | 0 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-497 | The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does. |
| CWE-306 | The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. |
