{"affected":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"FlexNet Beacon","source":"CNA: flexera","vendor":"Flexera","versions":[{"lessThan":"26.4.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","platforms":["Windows"],"product":"FlexNet Manager Suite","source":"CNA: flexera","vendor":"Flexera","versions":[{"changes":[{"at":"2026 R1 IOK-2107311","status":"unaffected"}],"lessThan":"2026 R2","status":"affected","version":"2026 R1","versionType":"custom"},{"changes":[{"at":"2025 R2 IOK-2107311","status":"unaffected"}],"lessThan":"2026 R1","status":"affected","version":"2025 R2","versionType":"custom"},{"changes":[{"at":"2025 R1 IOK-2107311","status":"unaffected"}],"lessThan":"2025 R2","status":"affected","version":"2025 R1","versionType":"custom"},{"lessThan":"2025 R1","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-110390","cwes":["CWE-306","CWE-497"],"description":"Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.9,"severity":"medium","source":"CNA: flexera","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1793917964772,"publishedAt":1793917964772,"references":[{"source":"CNA: flexera","tags":["vendor-advisory"],"url":"https://community.flexera.com/s/article/Flexera-Beacon-Security-Advisory-CVE-2026-110390"},{"source":"CNA: flexera","tags":["patch"],"url":"https://community.flexera.com/s/article/Flexera-Beacon-security-hotfix-IOK-2107311"}],"remediation":[{"kind":"fix","source":"CNA: flexera","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://community.flexera.com/s/article/Flexera-Beacon-security-hotfix-IOK-2107311"}],"revision":"bc3619c950f76a45b32c9589bd21844af6a7783dae32528513a0b4c044bb28cd","sources":[{"modifiedAt":1793917964772,"name":"CNA: flexera","retrievedAt":1793920102705,"url":"https://www.cve.org/CVERecord?id=CVE-2026-110390"}],"ssvc":null,"status":"published","title":"FlexNet Beacon Missing Authentication Vulnerability","updatedAt":1793920102705}