CVE-2026-1619

Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

Score

CVSS 3.1 8.3 High

Status

Modified - iletisim@usom.gov.tr

Published

2026-02-13

Last modified

2026-06-06

Weaknesses

CWE-639

Affected products

• Flexcity (Uni-yaz)
• Flexcitykiosk (Universal Software Inc.)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0065
• https://www.usom.gov.tr/bildirim/tr-26-0065