FlexNet Publisher Imadmin SOAP Authentication Bypass (CVE-2026-19572)

Vulnerability Overview CVE ID: CVE-2026-19572 Vulnerability Name: FlexNet Publisher Imadmin SOAP Authentication Bypass Vulnerability Description: A security vulnerability has been identified in FlexNet Publisher Imadmin. The vulnerability exists in a SOAP processor where a hardcoded authentication bypass could allow unauthenticated users to obtain privileged administrator sessions without providing valid credentials. Affected Products Affected Products: FlexNet Publisher Imadmin versions 11.19.11 and earlier. Remediation Remediation Action: Administrator authentication is now correctly enforced for all administrative operations, ensuring that only authenticated and authorized users can access privileged management features. Fixed Version: Revenera has addressed this vulnerability in FlexNet Publisher Imadmin 11.19.11.1. It is recommended that users of affected versions upgrade to Imadmin 11.19.11.1 to obtain the security fix. The latest version of Imadmin can be downloaded from the FlexNet Publisher Imadmin Download Links article. Additional Information Acknowledgments: Thanks to Ryan Wincey (@rwincey) of Securifera for identifying and disclosing this issue to Revenera PSIRT via the responsible disclosure process. Files Related Files: No specific file links provided. Related Articles FlexNet Publisher Imadmin: Denial of Service Vulnerability Discovered IMPORTANT NOTICE: Possible Security Vulnerability in FlexNet Publisher Imadmin License Server Manager FlexNet Publisher Imadmin Download Links FlexNet Publisher Imadmin: Security Vulnerability CVE-2022-23308 Detected in Modsecurity Component Impact of CVE-2017-5571: Open Redirect Vulnerability in Imadmin Component of Flexera FlexNet Publisher Contact Information Phone: +1.800.374.4353 Website: revenera.com Footer Information Copyright: © 2026 Flexera Software. All Rights Reserved. Privacy Policy: Privacy policy Terms and Conditions: Terms and conditions Community: Flexera Community Contact Us: Contact Us

Goal Reached Thanks to every supporter — we hit 100%!

FlexNet Publisher Imadmin SOAP Authentication Bypass (CVE-2026-19572)