High severity8.8NVD Advisory· Published Feb 13, 2026· Updated Jun 4, 2026
CVE-2025-14349
CVE-2025-14349
Description
Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation.
This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.
Affected products
3<1.0.36+ 1 more
- (no CPE)range: <1.0.36
- (no CPE)range: 1.0
Patches
Vulnerability mechanics
References
2- www.usom.gov.tr/bildirim/tr-26-0065nvdThird Party Advisory
- siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0065nvd
News mentions
0No linked articles in our index yet.