Vulnerabilities

TI-2026-01305 CVE-2026-1619 · GHSA-xgwv-vx48-69hc

IDOR in Universal Sotware's FlexCity/Kiosk

LOW 38

Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00334 Published 2026-02-13 Fixed in 1.0.36 CWE-639

TI-2026-01304 CVE-2026-1618 · GHSA-4p49-fwp8-38mv

MEDIUM 40

Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-02-13 Fixed in 1.0.36 CWE-288

TI-2025-13110 CVE-2025-14349 · GHSA-q3vc-646j-prpq

MEDIUM 40

Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00407 Published 2026-02-13 Fixed in 1.0.36 CWE-267