{"id":"CVE-2026-110390","aliases":["EUVD-2026-117872","GHSA-gvx3-5xrq-vr57"],"status":"published","title":"FlexNet Beacon Missing Authentication Vulnerability","description":"Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00408,"percentile":0.35527,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306","CWE-497"],"published":"2026-11-05T22:32:44Z","modified":"2026-11-10T14:01:17Z","products":[{"vendor":"flexera","product":"flexnet beacon"},{"vendor":"flexera","product":"flexnet manager suite"},{"vendor":"flexera software llc","product":"flexnet manager suite"}],"references":[{"url":"https://community.flexera.com/s/article/Flexera-Beacon-Security-Advisory-CVE-2026-110390","tags":["vendor-advisory"]},{"url":"https://community.flexera.com/s/article/Flexera-Beacon-security-hotfix-IOK-2107311","tags":["patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110390"},{"url":"https://github.com/advisories/GHSA-gvx3-5xrq-vr57"}],"sources":{"cve":[{"id":"CVE-2026-110390","title":"FlexNet Beacon Missing Authentication Vulnerability","description":"Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).","status":"published","published":"2026-11-05T22:32:44.772Z","modified":"2026-11-10T14:01:17.593Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"}],"cwes":["CWE-306","CWE-497"],"updated_at":"2026-11-10T14:38:57.942493Z"}],"euvd":[{"id":"EUVD-2026-117872","description":"Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).","status":"published","published":"2026-11-05T22:32:44Z","modified":"2026-11-10T14:01:17Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-10T15:21:21.031993Z"}],"ghsa":[{"id":"GHSA-gvx3-5xrq-vr57","title":"Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite...","description":"Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).","status":"published","published":"2026-11-06T00:32:47Z","modified":"2026-11-06T00:32:54Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"cwes":["CWE-306"],"updated_at":"2026-11-06T00:57:25.690752Z"}],"nvd":[{"id":"CVE-2026-110390","description":"Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).","status":"published","published":"2026-11-05T23:16:50.37Z","modified":"2026-11-10T14:17:11.663Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"}],"cwes":["CWE-306","CWE-497"],"updated_at":"2026-11-10T16:19:50.369963Z"}]}}