Skip to content
OpenAdvisories

Product · Universal Software

FlexCity/Kiosk

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.3
    CVE-2026-1619

    IDOR in Universal Sotware's FlexCity/Kiosk

    Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

    Universal Software FlexCity/Kiosk
  • High 8.8
    CVE-2026-1618

    Admin Account Takeover in Universal Sotware's FlexCity/Kiosk

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

    Universal Software FlexCity/Kiosk
  • High 8.8
    CVE-2025-14349

    Business Logic Error in Universal Software's FlexCity/Kiosk

    Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kios…

    Universal Software FlexCity/Kiosk