A vulnerability classified as critical has been found in Universal Software FlexCity and Kiosk up to 1.0.35. This affects an unknown part. Performing a manipulation results in authentication bypass using alternate channel.
This vulnerability is reported as CVE-2026-1618. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.
