Privilege Escalation in FlexNet Manager Suite 2025 R1

Publication date: 2026-06-19

Last updated on: 2026-06-22

Assigner: Flexera Software LLC

Description

A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 that could allow an authenticated user with read-only access to account settings to escalate their privileges to Administrator level.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-19

Last Modified

2026-06-22

Generated

2026-07-10

AI Q&A

2026-06-19

EPSS Evaluated

2026-07-08

NVD

CVE-2026-4026

EUVD

EUVD-2026-38010

Affected Vendors & Products

Vendor	Product	Version / Range
flexera	flexnet_manager_suite	2025_r1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability exists in FlexNet Manager Suite 2025 R1 and allows an authenticated user who only has read-only access to account settings to escalate their privileges to the Administrator level.

Impact Analysis

The vulnerability can lead to unauthorized privilege escalation, enabling a user with limited read-only access to gain full administrative control. This could result in unauthorized changes to system configurations, potential data breaches, and compromise of the overall security of the FlexNet Manager Suite environment.

Hi! I’m here to help you understand CVE-2026-4026. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70