Approved changes feed: RSS · Atom

cpe:2.3:a:universal_software_inc.:flexcity/kiosk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUniversal Software Inc. (60488720-9147-55c5-87ca-cd73e4aef52d)
ProductFlexcity/Kiosk (2058b5f1-ad6c-5faa-ae75-a5121c597d06)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1619 vulnerable 2026-06-08 07:49:09.040991 IDOR in Universal Sotware's FlexCity/Kiosk
HIGH (8.3)
Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.
Published: 2026-02-13T13:20:54.637Z
Updated: 2026-06-06T07:56:54.717Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1618 vulnerable 2026-06-08 07:49:09.039206 Admin Account Takeover in Universal Sotware's FlexCity/Kiosk
HIGH (8.8)
Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.
Published: 2026-02-13T13:14:45.785Z
Updated: 2026-06-06T07:58:00.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14349 vulnerable 2026-06-08 07:06:34.336359 Business Logic Error in Universal Software's FlexCity/Kiosk
HIGH (8.8)
Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.
Published: 2026-02-13T13:09:43.901Z
Updated: 2026-06-04T06:21:43.095Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.