Vulnerability in Flexera Flexnet Manager Suite

CVE-2026-4027

A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to attachment files due to insufficient access control.

EPSS: 0.004 (27.7th percentile) — read the EPSS interpretation.

Affected products

Flexera Flexnet Manager Suite — versions 2025 R1, 2026 R1

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

PSIRT-CNA@flexerasoftware.com (vendor-advisory)