Medium severityNVD Advisory· Published Nov 5, 2026

CVE-2026-110390

Description

Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).

Affected products

Revenera/FlexNet Beaconllm-create
Revenera/Flexera Onellm-create
Revenera/FlexNet Manager Suitellm-create

Patches

Vulnerability mechanics

References

community.flexera.com/s/article/Flexera-Beacon-Security-Advisory-CVE-2026-110390nvd
community.flexera.com/s/article/Flexera-Beacon-security-hotfix-IOK-2107311nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000