Vulnerability · Published Jun 19, 2026 · Assigned by flexera
CVE-2026-4027FlexNet Manager Suite Attachment File Disclosure
High 7.1
In plain English
A high-severity improper access control in FlexNet Manager Suite from Flexera. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Severity (CVSS 4.0)7.1High
Exploit odds (30 days)0.4%top 71.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to attachment files due to insufficient access control.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Flexera | FlexNet Manager Suite | 2025 R1 – through 2025 R2 |
Weakness: CWE-284 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
References
- https://community.flexera.com/s/feed/0D5PL00000ssjNi0AI vendor-advisory