CVE-2026-110390

CVSS 6.9 (medium) · published 2026-11-05

Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).

Weakness: CWE-306, CWE-497

Source: NVD CVE-2026-110390

References

• https://community.flexera.com/s/article/Flexera-Beacon-Security-Advisory-CVE-2026-110390
• https://community.flexera.com/s/article/Flexera-Beacon-security-hotfix-IOK-2107311

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.