Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-1618

Admin Account Takeover in Universal Sotware's FlexCity/Kiosk

Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Uni-yaz Universal Software Inc.
Products
Flexcity Flexcity/kiosk
CVE-2026-1619

IDOR in Universal Sotware's FlexCity/Kiosk

Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Uni-yaz Universal Software Inc.
Products
Flexcity Flexcity/kiosk
CVE-2025-14349

Business Logic Error in Universal Software's FlexCity/Kiosk

Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Uni-yaz Universal Software Inc.
Products
Flexcity Flexcity/kiosk