PatchTheCVE: flexcityhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-1619: Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inchttps://patchthecve.com/cve/CVE-2026-1619.htmlhttps://patchthecve.com/cve/CVE-2026-1619.htmlWed, 17 Jun 2026 10:16:10 +0000HIGH 8.3: Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.CVE-2026-1618: Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inchttps://patchthecve.com/cve/CVE-2026-1618.htmlhttps://patchthecve.com/cve/CVE-2026-1618.htmlWed, 17 Jun 2026 10:16:10 +0000HIGH 8.8: Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.CVE-2025-14349: Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universalhttps://patchthecve.com/cve/CVE-2025-14349.htmlhttps://patchthecve.com/cve/CVE-2025-14349.htmlWed, 17 Jun 2026 08:35:47 +0000HIGH 8.8: Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.