FlexNet Publisher vulnerabilities

2 known vulnerabilities in FlexNet Publisher from Flexera. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  FlexNet Publisher: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-19572Oct 7, 2026Flexera

  A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without providing va

• 8.5 High severity

  FlexNet Publisher: Uncontrolled Search Path Element

  CVE-2024-2658Jan 30, 2025Flexera

  A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configuration file to load from a non-existent directory. An unauthorized, locally authenticated user with low privileges can potentially create the