CVE-2026-1619Disclosure(uni-yaz / flexcity)

LOWCVSS 8.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

uni-yaz CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.usom.gov.tr/bildirim/tr-26-0065

Other references

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0065

Weakness type (CWE)

CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

flexcity

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 2 classified signals
General: 2 classified signals
Peaked 1d ago at 3 mentions (2026-02-13); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

uni-yaz

Products

flexcity

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

250.0%

General

250.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-13	3	Disclosure2General1
2026-02-18	1	General1

Full discourse4 posts

CVE@CVEnew237d
General
CVE-2026-1619 Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers.This issue affects F… https://www.cve.org/CVERecord?id=CVE-2026-1619
Post summary
The post lists CVE‑2026‑1619 with a link to its CVE record but provides no PoC, exploit, active use, or patch information beyond the vulnerability type.
00010290
56.5K followersView on X
CRAC Learning - Tech@cracbot232d
General
CVE-2026-1619 (CVSS:8.3, HIGH) is Awaiting Analysis. Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploita..https://nvd.nist.gov/vuln/detail/CVE-2026-1619 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet references CVE‑2026‑1619 with its CVSS score and a brief description of an authorization bypass, but provides no evidence of exploitation, PoC, or mitigation steps.
0000036
171 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds237d
Disclosure
CVE-2026-1619 Authorization Bypass in Universal Software FlexCity/Kiosk Before Version 1.0.36 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1619
Post summary
The text announces CVE-2026-1619, an authorization bypass vulnerability in Universal Software FlexCity/Kiosk versions before 1.0.36, with no further exploitation or mitigation details.
0000029
4.0K followersView on X
The Hacker Wire@TheHackerWire237d
Disclosure
🟠 CVE-2026-1619 - High Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers.This issue affects FlexCity/Kiosk: from 1.0 ... https://www.thehackerwire.com/vulnerability/CVE-2026-1619/ https://t.co/EFlV883Fgs
Post summary
A high severity authorization bypass vulnerability (CVE-2026-1619) affecting Universal Software Inc. FlexCity/Kiosk from version 1.0 onward has been publicly disclosed.
0000046
112 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	uni-yaz	flexcity	-	-	-

Explore more

Back to dashboard uni-yaz CVEs flexcity vulnerabilities

What researchers are saying

CVE-2026-1619

CVE@CVEnewGeneral

The post lists CVE‑2026‑1619 with a link to its CVE record but provides no PoC, exploit, active use, or patch information beyond the vulnerability type.

CRAC Learning - Tech@cracbotGeneral

The tweet references CVE‑2026‑1619 with its CVSS score and a brief description of an authorization bypass, but provides no evidence of exploitation, PoC, or mitigation steps.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces CVE-2026-1619, an authorization bypass vulnerability in Universal Software FlexCity/Kiosk versions before 1.0.36, with no further exploitation or mitigation details.

The Hacker Wire@TheHackerWireDisclosure

A high severity authorization bypass vulnerability (CVE-2026-1619) affecting Universal Software Inc. FlexCity/Kiosk from version 1.0 onward has been publicly disclosed.