PT-2026-137756

CVE-2026-110390

·

Published

2026-11-05

·

Updated

2026-11-05

Description by

CVSS 4.0
6.9
Medium
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-306: Missing Authentication for Critical Function
CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Related identifiers
CVE-2026-110390
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com