← Database

CVE-2025-14349

HIGH CVSS: 8.8 Published: 2026-02-13 Modified: 2026-06-17

Description

Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

Affected Platforms

Uni-Yaz Flexcity

Weakness Type

CWE-267, CWE-306

References