Skip to content
OpenAdvisories
High · 8.8 CVE-2025-14349 EUVD-2025-207537GHSA-q3vc-646j-prpq

Business Logic Error in Universal Software's FlexCity/Kiosk

Published Feb 13, 2026 · Updated Jun 4, 2026 · Assigned by TR-CERT

Description

Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation.

This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

Affected products

VendorProductAffectedFixed
Universal Software FlexCity/Kiosk 1.0 – < 1.0.36 1.0.36

References