CVE Intelligence

Uni-yaz vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Uni-yaz products: 3 record(s), with severity, exploitation and fixes.

Flexcity 3

Exploited only (KEV) →

CVE-2026-1619 High · 8.3 CWE-639 Feb 13, 2026
IDOR in Universal Sotware's FlexCity/Kiosk
Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.
CVE-2026-1618 High · 8.8 CWE-288 Feb 13, 2026
Admin Account Takeover in Universal Sotware's FlexCity/Kiosk
Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.
CVE-2025-14349 High · 8.8 CWE-267 Feb 13, 2026
Business Logic Error in Universal Software's FlexCity/Kiosk
Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.