Is CVE-2023-7357 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2023-7357 being exploited in the wild.

How severe is CVE-2023-7357?

Informational severity, published 29 October 2026.

Which products and versions are affected?

Flexera FlexNet Publisher versions prior to 2023 R2 (11.19.4.0).

Is there a fix for CVE-2023-7357?

Yes: fixed in FlexNet Publisher 2023 R2 (11.19.4.0). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2023-7357 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2023-7357?

Check whether you run Flexera FlexNet Publisher at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2023-7357: Flexera FlexNet Publisher lmadmin remote code execution

CVE-2023-7357 · Severity: info · Published 2026-10-29

FlexNet Publisher's lmadmin web interface contains a remote code execution vulnerability that could allow an attacker to execute arbitrary code on the system. This affects license management functionality used across enterprise environments, potentially enabling full system compromise.

Vendors: Flexera.

Quick answers

Is CVE-2023-7357 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2023-7357 being exploited in the wild.
How severe is CVE-2023-7357?: Informational severity, published 29 October 2026.
Which products and versions are affected?: Flexera FlexNet Publisher versions prior to 2023 R2 (11.19.4.0).
Is there a fix for CVE-2023-7357?: Yes: fixed in FlexNet Publisher 2023 R2 (11.19.4.0). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2023-7357 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2023-7357?: Check whether you run Flexera FlexNet Publisher at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: FlexNet Publisher 2023 R2 (11.19.4.0)

Technical details

A remote code execution vulnerability exists in the FlexNet Publisher lmadmin web user interface. The vulnerability allows unauthenticated network attackers to execute arbitrary code, though specific attack vectors and preconditions are not detailed in the available information. A fix is available in FlexNet Publisher 2023 R2 (11.19.4.0).

Affected products

Flexera FlexNet Publisher versions prior to 2023 R2 (11.19.4.0)

Timeline

2026-10-29: disclosed

References

https://community.flexera.com/s/article/remote-code-execution-vulnerability-remediated-in-lmadmin

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.