Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-19572 EUVD-2026-94166GHSA-98jh-cm22-cgp2

FlexNet Publisher lmadmin SOAP Authentication Bypass Vulnerability

Published Oct 7, 2026 · Updated Oct 7, 2026 · Assigned by flexera

Description

A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without providing valid credentials.

Affected products

VendorProductAffectedFixed
Flexera FlexNet Publisher ≤ 11.19.11 —

References