Flexera vulnerabilities
Published CVEs affecting Flexera products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-4869
Medium · 5.4
CWE-426 Oct 13, 2026
A potential privilege escalation issue was identified in InstallShield version 2025 R2 and...
A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local administrator launches a compressed Setup.exe with Prerequisites from an unsecured location, the Prerequisite installers also might load from an unsecured location, potentially leading to privilege escalation.
CVE-2026-19572
Critical · 9.3
CWE-288 Oct 7, 2026
FlexNet Publisher lmadmin SOAP Authentication Bypass Vulnerability
A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without providing valid credentials.
CVE-2026-4027
High · 7.1
CWE-284 Jun 19, 2026
FlexNet Manager Suite Attachment File Disclosure
A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to attachment files due to insufficient access control.
CVE-2026-4026
High · 8.7
CWE-284 Jun 19, 2026
FlexNet Manager Suite Privilege Escalation Vulnerability
A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 that could allow an authenticated user with read-only access to account settings to escalate their privileges to Administrator level.