Flexera vulnerabilities
We track 4 vulnerabilities in Flexera products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 7, 2026.
Latest Flexera vulnerabilities
- 9.3 Critical severity
FlexNet Publisher: Authentication Bypass Using an Alternate Path or Channel
A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without providing va
- 7.1 High severity
FlexNet Manager Suite: Improper Access Control
A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to attachment files due to insufficient access control.
- 8.7 High severity
FlexNet Manager Suite: Improper Access Control
A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 that could allow an authenticated user with read-only access to account settings to escalate their privileges to Administrator level.
- 8.5 High severity
FlexNet Publisher: Uncontrolled Search Path Element
A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configuration file to load from a non-existent directory. An unauthorized, locally authenticated user with low privileges can potentially create the