A vulnerability described as very critical has been identified in Universal Software FlexCity and Kiosk up to 1.0.35. Affected by this issue is some unknown functionality. Such manipulation leads to privilege defined with unsafe actions.

This vulnerability is documented as CVE-2025-14349. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.