Unrated severityNVD Advisory· Published Feb 13, 2026· Updated Feb 13, 2026
Business Logic Error in Universal Software's FlexCity/Kiosk
CVE-2025-14349
Description
Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation.This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.
Affected products
2- Range: >=1.0, <1.0.36
- Universal Software Inc./FlexCity/Kioskv5Range: 1.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.usom.gov.tr/bildirim/tr-26-0065mitrethird-party-advisory
News mentions
0No linked articles in our index yet.