CVE-2026-19572
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without providing valid credentials.
Risk Assessment
An unauthenticated attacker can gain full control over the license server, potentially leading to unauthorized access to systems and data.
Recommendation
Apply vendor patches immediately and restrict access to the lmadmin service to trusted networks only.
Other vulnerabilities in FlexNet Publisher
Original NVD description (English source)
A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without providing valid credentials.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS