CVE-2026-19572 — FlexNet Publisher lmadmin SOAP Authentication Bypass Vulnerability

CVE-2026-19572

FlexNet Publisher lmadmin SOAP Authentication Bypass Vulnerability PUBLISHED

Description (CNA)

A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without providing valid credentials.

Affected (CNA)

Vendor / product	Versions
Flexera / FlexNet Publisher	affected 0 through 11.19.11

CWE

CWE-288

References

https://community.revenera.com/s/article/CVE202619572-FlexNet-Publisher-lmadmin-SOAP-Authentication-Bypass-Vulnerability

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.