Universal Software Inc. FlexCity vulnerabilities

Latest Universal Software Inc. FlexCity CVEs

Newest publication first

1. CVE-2026-6792 Improper Authorization in Universal Sotware's FlexCity

   Published 2026-07-21

   Medium·CVSS 6.5 EPSS 0.34%

   Missing Authorization vulnerability in Universal Software Inc. FlexCity allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexCity: from 5.536.0 before 5.542.0.

2. CVE-2026-8285 OTP Bypass in Universal Sotware's FlexCity

   Published 2026-07-21

   Medium·CVSS 4.3 EPSS 0.41%

   Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excessive Allocation. This issue affects FlexCity: from 5.536.0 before 5.542.0.

3. CVE-2026-8284 Open Redirect in Universal Sotware's FlexCity

   Published 2026-07-21

   Medium·CVSS 6.1 EPSS 0.24%

   URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 before 5.542.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.