Security Advisory

CVE-2025-14349

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-13 13:09:43
Last updated 2026-06-04 06:21:43
Assigner TR-CERT
CVSS score 8.8
State PUBLISHED

Description

Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36.