Dashboard / CVE-2026-110390

CVE-2026-110390

MEDIUM
MEDIUM Priority: 0.03 BB Relevance: 74/100
Published: 2026-11-05 Modified: 2026-11-12 First seen: 2026-11-05 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: X
AT: None
VC: Low
VI: None
VA: None

Description

Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).

Weakness Classification (2)

Affected Software (10)

VendorProductVersion
Flexera FlexNet Beacon 0 < 26.4.1
Flexera FlexNet Beacon 0 < 26.4.1
Flexera FlexNet Manager Suite 2026 R1 < 2026 R2
Flexera FlexNet Manager Suite 2025 R2 < 2026 R1
Flexera FlexNet Manager Suite 2025 R1 < 2025 R2
Flexera FlexNet Manager Suite 0 < 2025 R1
Flexera FlexNet Manager Suite 2026 R1 < 2026 R2
Flexera FlexNet Manager Suite 2025 R2 < 2026 R1
Flexera FlexNet Manager Suite 2025 R1 < 2025 R2
Flexera FlexNet Manager Suite 0 < 2025 R1

References & Advisories (2)

Bug Bounty Relevance

74 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

6.9 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.41%
Raw Score 0.004080
Percentile 35.6%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00408
2026-11-12
0.00408
2026-11-10
0.00408
2026-11-09
0.00408
2026-11-08
0.00408
2026-11-07
0.00408
2026-11-06
0.00408

Intelligence Sources

mitre ref →
nvd ref →

External Links