---
id: "CVE-2026-110390"
page: "https://infrastack.ai/live/CVE-2026-110390"
kind: "vulnerability"
aliases: ["CVE-2026-110390"]
title: "Flexera FlexNet Beacon leaks policy and targeting data to unauthenticated users"
severity: "medium"
cvss: 6.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["flexera", "flexnet-beacon", "flexnet-manager-suite", "infrastructure", "software-asset-management"]
not_affected_if: ["anonymous-access-disabled"]
published_at: "2026-11-05T23:16:50+00:00"
first_seen_at: "2026-11-05T23:48:39+00:00"
updated_at: "2026-11-05T23:49:42+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110390", "first_seen_at": "2026-11-05T23:48:39+00:00"}]
exploit_sources: []
---

# Flexera FlexNet Beacon leaks policy and targeting data to unauthenticated users

Link for people: https://infrastack.ai/live/CVE-2026-110390 (this .md is for agents)

The FlexNet Beacon component of Flexera One and FlexNet Manager Suite lacks authentication on a web endpoint. An unauthenticated remote attacker can read Beacon policy and targeting information when anonymous web server access is enabled, which is the default.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether anonymous web server access is enabled on the FlexNet Beacon component (the default is enabled, per the description).
- Confirm which Flexera One or FlexNet Manager Suite deployments run a FlexNet Beacon component.
- Version to compare against: unknown

## Timeline

- 2026-11-05T23:48:39+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-110390

## From the sources

Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_