Flexcity vulnerabilities

3 known vulnerabilities in Flexcity from Uni-yaz. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  FlexCity/Kiosk: Authorization Bypass Through User-Controlled Key

  CVE-2026-1619Feb 13, 2026Universal Software

  Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

• 8.8 High severity

  FlexCity/Kiosk: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-1618Feb 13, 2026Universal Software

  Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

• 8.8 High severity

  FlexCity/Kiosk: Privilege Defined With Unsafe Actions

  CVE-2025-14349Feb 13, 2026Universal Software

  Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kiosk