PatchSiren

Uni Yaz CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Uni Yaz CVE published 2026-02-13

CVE-2026-1618

CVE-2026-1618 is a high-severity vulnerability in FlexCity/Kiosk, a product by Universal Software Inc. The issue, which has a CVSS score of 8.8, allows for Authentication Bypass Using an Alternate Path or Channel, potentially leading to Privilege Escalation. The vulnerability affects FlexCity/Kiosk versions from 1.0 up to but not including 1.0.36.