Known Vulnerabilities for Flex by Flex Project
Listed below are 1 of the newest known vulnerabilities associated with "Flex" by "Flex Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-46138 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix OOB read and infinite loop in ... | Not Provided | 2026-05-28 | 2026-06-14 |
| CVE-2025-30850 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sfaerber Dr. Flex dr-fl... | Not Provided | 2025-03-27 | 2026-04-23 |
| CVE-2025-15645 json | Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due to mis... | Not Provided | 2026-05-19 | 2026-05-20 |
| CVE-2019-6293 json | An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion problem ... | 5.5 - MEDIUM | 2019-01-15 | 2023-10-06 |
| CVE-2012-6442 json | When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/U... | 5.5 - MEDIUM | 2013-01-24 | 2026-06-03 |
| CVE-2012-6440 json | The Web server password authentication mechanism used by the products is vulnerable to a MitM and Replay attack. Successful e... | 5.5 - MEDIUM | 2013-01-24 | 2026-06-03 |
| CVE-2012-6438 json | The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port ... | 5.5 - MEDIUM | 2013-01-24 | 2026-06-03 |
| CVE-2012-6437 json | The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to ... | 5.5 - MEDIUM | 2013-01-24 | 2026-06-03 |
| CVE-2012-6436 json | The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port ... | 5.5 - MEDIUM | 2013-01-24 | 2026-06-03 |
| CVE-2012-6435 json | When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/U... | 5.5 - MEDIUM | 2013-01-24 | 2026-06-03 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Flex Project | Flex | 2.6.4 | |||
| Application | Flex Project | Flex | 2.6.3 | |||
| Application | Flex Project | Flex | 2.6.2 | |||
| Application | Flex Project | Flex | 2.6.1 | |||
| Application | Flex Project | Flex | 2.6.0 | |||
| Application | Flex Project | Flex | 2.5.5c | |||
| Application | Flex Project | Flex | 2.5.5b | |||
| Application | Flex Project | Flex | 2.5.39 | |||
| Application | Flex Project | Flex | 2.5.37 | |||
| Application | Flex Project | Flex | 2.5.36 | |||
| Application | Flex Project | Flex | 2.5.35 | |||
| Application | Flex Project | Flex | 2.5.34 | |||
| Application | Flex Project | Flex | 2.5.33 | |||
| Application | Flex Project | Flex | 2.5.32 | |||
| Application | Flex Project | Flex | 2.5.31 | |||
| Application | Flex Project | Flex | 2.5.30 | |||
| Application | Flex Project | Flex | 2.5.29 | |||
| Application | Flex Project | Flex | 2.5.28 | |||
| Application | Flex Project | Flex | 2.5.27 | |||
| Application | Flex Project | Flex | 2.5.26 |