{"id":"CVE-2026-110390","aliases":[],"cve":{"records":[{"id":"CVE-2026-110390","source":"flexera","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-14T01:08:02.713Z","published":"2026-11-05T22:32:44.772Z","modified":"2026-11-10T14:01:17.593Z"}],"publishers":[{"name":"flexera","role":"CNA","organizationId":"44d08088-2bea-4760-83a6-1e9be26b15ab","modified":"2026-11-05T22:32:44.772Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-10T14:01:17.593Z"}],"references":[{"url":"https://community.flexera.com/s/article/Flexera-Beacon-Security-Advisory-CVE-2026-110390","tags":["vendor-advisory"],"source":"flexera"},{"url":"https://community.flexera.com/s/article/Flexera-Beacon-security-hotfix-IOK-2107311","tags":["patch"],"source":"flexera"}],"weaknesses":[{"id":"CWE-306","description":"CWE-306 Missing authentication for critical function","source":"flexera"},{"id":"CWE-497","description":"CWE-497 Exposure of sensitive system information to an unauthorized control sphere","source":"flexera"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-10T14:01:05.369765Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"title":"FlexNet Beacon Missing Authentication Vulnerability","titleSource":"flexera","descriptionSource":"flexera","description":"Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).","score":6.9,"severity":"medium","published":"2026-11-05T22:32:44.772Z","modified":"2026-11-10T14:01:17.593Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Flexera","name":"FlexNet Beacon","platforms":["Windows"],"versions":[{"version":"0","status":"affected","lessThan":"26.4.1","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"flexera","url":"https://www.cve.org/CVERecord?id=CVE-2026-110390"},{"vendor":"Flexera","name":"FlexNet Manager Suite","platforms":["Windows"],"versions":[{"version":"2026 R1","status":"affected","lessThan":"2026 R2","versionType":"custom","changes":[{"at":"2026 R1 IOK-2107311","status":"unaffected"}]},{"version":"2025 R2","status":"affected","lessThan":"2026 R1","versionType":"custom","changes":[{"at":"2025 R2 IOK-2107311","status":"unaffected"}]},{"version":"2025 R1","status":"affected","lessThan":"2025 R2","versionType":"custom","changes":[{"at":"2025 R1 IOK-2107311","status":"unaffected"}]},{"version":"0","status":"affected","lessThan":"2025 R1","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"flexera","url":"https://www.cve.org/CVERecord?id=CVE-2026-110390"}],"remediation":[],"references":["https://community.flexera.com/s/article/Flexera-Beacon-Security-Advisory-CVE-2026-110390","https://community.flexera.com/s/article/Flexera-Beacon-security-hotfix-IOK-2107311"],"sources":[{"name":"CVE","id":"CVE-2026-110390","modified":"2026-11-10T14:01:17.593Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-110390"}],"assessments":[{"source":"flexera","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","score":6.9}],"sourceAffected":[],"observedAt":"2026-11-10T14:10:53.424Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:30:32.029Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-06T00:35:37.004Z","attemptedAt":"2026-11-06T00:35:37.004Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-06T00:35:37.648Z","attemptedAt":"2026-11-06T00:35:37.648Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-06T00:35:37.997Z","attemptedAt":"2026-11-06T00:35:37.997Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-06T00:35:36.909Z","attemptedAt":"2026-11-06T00:35:36.909Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-110390","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110390","modified":"2026-11-05T23:16:50.370","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-06T00:35:37.004Z"},{"source":"GitHub Advisory Database","id":"GHSA-gvx3-5xrq-vr57","url":"https://github.com/advisories/GHSA-gvx3-5xrq-vr57","modified":"2026-11-06T00:32:54Z","checkedAt":"2026-11-06T00:35:37.648Z"},{"source":"ENISA EUVD","id":"EUVD-2026-117872","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117872","modified":"Nov 5, 2026, 10:32:44 PM","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","checkedAt":"2026-11-06T00:35:37.997Z"}],"aiSummary":{"text":"FlexNet Beacon and FlexNet Manager Suite have a missing authentication vulnerability, allowing unauthenticated remote attackers to obtain policy and targeting information when anonymous web server access is enabled. Affected versions include FlexNet Beacon before 26.4.1 and FlexNet Manager Suite before 2026 R2.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-05T23:56:19.577Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-110390"}]}}