Vulnerabilities

TI-2026-01307 CVE-2026-1621 · GHSA-pv35-6x7m-m92j

Register Bypass in Universal Sotware's E-Municipality

LOW 30

Authentication bypass by primary weakness vulnerability in Universal Software Inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00405 Published 2026-08-14 Fixed in 20260204 CWE-305

TI-2026-06308 CVE-2026-7187 · GHSA-v5fv-jqvg-9pc9

MEDIUM 40

Missing authentication for critical function vulnerability in Universal Software Inc.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00366 Published 2026-07-28 No fix listed CWE-306

TI-2026-05956 CVE-2026-6792 · GHSA-xm45-c62q-jmp8

LOW 29

Missing Authorization vulnerability in Universal Software Inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0034 Published 2026-07-21 Fixed in 5.542.0 CWE-862

TI-2026-07300 CVE-2026-8285 · GHSA-m9cr-mcrx-m4w3

LOW 20

Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00414 Published 2026-07-21 Fixed in 5.542.0 CWE-307

TI-2026-07299 CVE-2026-8284 · GHSA-54rq-gf2j-3p48

LOW 27

URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0024 Published 2026-07-21 Fixed in 5.542.0 CWE-601

TI-2026-01305 CVE-2026-1619 · GHSA-xgwv-vx48-69hc

LOW 38

Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00334 Published 2026-02-13 Fixed in 1.0.36 CWE-639

TI-2026-01304 CVE-2026-1618 · GHSA-4p49-fwp8-38mv

MEDIUM 40

Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-02-13 Fixed in 1.0.36 CWE-288

TI-2025-13110 CVE-2025-14349 · GHSA-q3vc-646j-prpq

MEDIUM 40

Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00407 Published 2026-02-13 Fixed in 1.0.36 CWE-267

TI-2024-00791 CVE-2024-0857 · GHSA-jvrp-rv38-7jhr

MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00421 Published 2024-07-18 Fixed in 5.452.0 CWE-89