CVE-2026-110390
Medium
Description
Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).
SeverityMedium
CVSS6.9
Exploit probability—
Product
FlexNet Beacon
PublishedNov 5, 2026
First seenNov 6, 2026
How to fix
Update
- Flexera FlexNet Beacon26.4.1 or later
- Flexera FlexNet Manager Suite2026 R2, 2026 R1, 2025 R2, 2025 R1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Flexera FlexNet Beacon | v < 26.4.1 | 26.4.1 |
| Flexera FlexNet Manager Suite | 2026 R1 ≤ v < 2026 R2, 2025 R2 ≤ v < 2026 R1, 2025 R1 ≤ v < 2025 R2, v < 2025 R1 | 2026 R2, 2026 R1, 2025 R2, 2025 R1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.