by Kastro
Paper/Archive/CVE-2026-19572

CVE-2026-19572

Flexera FlexNet Publisher — FlexNet Publisher lmadmin SOAP Authentication Bypass Vulnerability

EPSS 0.4%CVSS 9.3
critical.is priorityof 100
35
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 33.4.334 × 206.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without providing valid credentials.

Affected

ProductAffectedFixed inSource
FlexNet Publisher≤ 11.19.11–CNA

Scores by source

flexera (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcommunity.revenera.com/s/article/CVE202619572-FlexNet-Publisher-lmadmin-SOAP-Authentication-Bypass-Vulnerability