CVE-2026-1618Disclosure(uni-yaz / flexcity)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch uni-yaz flexcity systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

uni-yaz CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.usom.gov.tr/bildirim/tr-26-0065

Other references

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0065

Weakness type (CWE)

CWE-288

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

flexcity

Threat summary

Patch or workaround signal is available
5 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 5 signals
Disclosure: 4 classified signals
Peaked 1d ago at 4 mentions (2026-02-13); latest day: 1
5 total mentions across 2 days

Affected systems

Vendors

uni-yaz

Products

flexcity

Deep dive

Activity timeline5 mentions / 2d

Signal classification2 categories

Disclosure

480.0%

Patch

120.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-13	4	Disclosure3Patch1
2026-02-18	1	Disclosure1

Full discourse5 posts

CVE@CVEnew239d
Disclosure
CVE-2026-1618 Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation.This issue affects FlexCity… https://www.cve.org/CVERecord?id=CVE-2026-1618
Post summary
A new authentication bypass vulnerability (CVE-2026-1618) in Universal Software Inc. FlexCity/Kiosk that permits privilege escalation has been disclosed, with no exploit or patch details provided.
00020290
56.5K followersView on X
CRAC Learning - Tech@cracbot235d
Disclosure
CVE-2026-1618 (CVSS:8.8, HIGH) is Awaiting Analysis. Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows ..https://nvd.nist.gov/vuln/detail/CVE-2026-1618 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2026-1618 is a high‑severity authentication bypass vulnerability awaiting analysis, with technical details provided but no PoC, exploit code, or patch mentioned.
0000034
171 followersView on X
CVEFind.com@CveFindCom239d
Patch
[CVE-2026-1618: HIGH] Universal Software Inc. FlexCity/Kiosk has an Authentication Bypass flaw allowing Privilege Escalation, impacting versions 1.0 to 1.0.36. Stay aware and update now.#cve,CVE-2026-1618,#cybersecurity https://cvefind.com/CVE-2026-1618
Post summary
The message highlights an authentication bypass vulnerability in Universal Software Inc. FlexCity/Kiosk that can lead to privilege escalation and urges users to apply available updates.
0000041
583 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds239d
Disclosure
CVE-2026-1618 Authentication Bypass in Universal Software FlexCity/Kiosk... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1618 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The text announces CVE‑2026‑1618, an authentication bypass vulnerability in Universal Software FlexCity/Kiosk, and provides a link to a vulnerability database entry but no PoC, exploit, patch, or evidence of active exploitation.
0000029
4.0K followersView on X
The Hacker Wire@TheHackerWire239d
Disclosure
🟠 CVE-2026-1618 - High Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation.This issue affects FlexCity/Kiosk: from 1.0 before ... https://www.thehackerwire.com/vulnerability/CVE-2026-1618/ https://t.co/rGJzxKKVCR
Post summary
The post announces CVE‑2026‑1618, an authentication bypass that permits privilege escalation in Universal Software Inc. FlexCity/Kiosk, but provides no PoC, exploit, active use evidence, or patch information.
0000043
112 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	uni-yaz	flexcity	-	-	-

Explore more

Back to dashboard uni-yaz CVEs flexcity vulnerabilities

What researchers are saying

CVE-2026-1618

CVE@CVEnewDisclosure

A new authentication bypass vulnerability (CVE-2026-1618) in Universal Software Inc. FlexCity/Kiosk that permits privilege escalation has been disclosed, with no exploit or patch details provided.

CRAC Learning - Tech@cracbotDisclosure

CVE-2026-1618 is a high‑severity authentication bypass vulnerability awaiting analysis, with technical details provided but no PoC, exploit code, or patch mentioned.

CVEFind.com@CveFindComPatch

The message highlights an authentication bypass vulnerability in Universal Software Inc. FlexCity/Kiosk that can lead to privilege escalation and urges users to apply available updates.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces CVE‑2026‑1618, an authentication bypass vulnerability in Universal Software FlexCity/Kiosk, and provides a link to a vulnerability database entry but no PoC, exploit, patch, or evidence of active exploitation.

The Hacker Wire@TheHackerWireDisclosure

The post announces CVE‑2026‑1618, an authentication bypass that permits privilege escalation in Universal Software Inc. FlexCity/Kiosk, but provides no PoC, exploit, active use evidence, or patch information.