CVE-2026-110390: FlexNet Beacon Missing Authentication Vulnerability

Published Nov 5, 2026

Updated

Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).

Event History

Nov 5, 2026

CVE Published

via MITRE·10:32 PM

Data Sourced

via MITRE·10:32 PM

DescriptionWeakness

Data Sourced

via NVD·11:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed?

Flexera One and FlexNet Manager Suite deployments using the FlexNet Beacon component are exposed when anonymous web server access is enabled. The advisory states that this is the default configuration.

What does an attacker need to exploit this issue?

An attacker can exploit the issue remotely without authentication, user interaction, or stated privileges. Successful exploitation allows access to Beacon policy and targeting information.

CVE-2026-110390: FlexNet Beacon Missing Authentication Vulnerability

Event History

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this issue?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this issue?