CVE Vulnerabilities

CVE-2026-1618

Authentication Bypass Using an Alternate Path or Channel

Published: Feb 13, 2026 | Modified: Mar 02, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows Privilege Escalation.This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.

Weakness

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected Software

NameVendorStart VersionEnd Version
FlexcityUni-yaz1.0 (including)1.0.36 (excluding)

Potential Mitigations

References