Vulnerability · Published Jun 19, 2026 · Assigned by flexera
CVE-2026-4026FlexNet Manager Suite Privilege Escalation Vulnerability
High 8.7
In plain English
A high-severity improper access control in FlexNet Manager Suite from Flexera. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Severity (CVSS 4.0)8.7High
Exploit odds (30 days)0.4%top 71.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 that could allow an authenticated user with read-only access to account settings to escalate their privileges to Administrator level.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Flexera | FlexNet Manager Suite | 2025 R1 |
Weakness: CWE-284 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://community.flexera.com/s/feed/0D5PL00000rJX5K0AW vendor-advisory