Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-6792

Improper Authorization in Universal Sotware's FlexCity

Missing Authorization vulnerability in Universal Software Inc. FlexCity allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexCity: from 5.536.0 before 5.542.0.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Universal Software Inc.
Products
Flexcity
CVE-2026-8285

OTP Bypass in Universal Sotware's FlexCity

Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excessive Allocation. This issue affects FlexCity: from 5.536.0 before 5.542.0.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Universal Software Inc.
Products
Flexcity
CVE-2026-8284

Open Redirect in Universal Sotware's FlexCity

URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 before 5.542.0.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Universal Software Inc.
Products
Flexcity
CVE-2026-1618

Admin Account Takeover in Universal Sotware's FlexCity/Kiosk

Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Uni-yaz Universal Software Inc.
Products
Flexcity Flexcity/kiosk
CVE-2026-1619

IDOR in Universal Sotware's FlexCity/Kiosk

Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Uni-yaz Universal Software Inc.
Products
Flexcity Flexcity/kiosk
CVE-2025-14349

Business Logic Error in Universal Software's FlexCity/Kiosk

Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Uni-yaz Universal Software Inc.
Products
Flexcity Flexcity/kiosk