Universal Software Inc.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| FlexCity | 3 | – | Jul 21, 2026 |
| FlexCity/Kiosk | 3 | – | Feb 13, 2026 |
| E-Municipality | 1 | – | Aug 14, 2026 |
| FlexWater Corporate Water Management | 1 | – | Jul 18, 2024 |
| UKBS | 1 | – | Jul 28, 2026 |
Exploited and recent CVEs
- CVE-2026-1621 Register Bypass in Universal Sotware's E-Municipality 0.4%
- CVE-2026-7187 Improper Authentication in Universal Sotware's UKBS 0.4%
- CVE-2026-6792 Improper Authorization in Universal Sotware's FlexCity 0.3%
- CVE-2026-8285 OTP Bypass in Universal Sotware's FlexCity 0.4%
- CVE-2026-8284 Open Redirect in Universal Sotware's FlexCity 0.2%
- CVE-2026-1619 IDOR in Universal Sotware's FlexCity/Kiosk 0.3%
- CVE-2026-1618 Admin Account Takeover in Universal Sotware's FlexCity/Kiosk 0.4%
- CVE-2025-14349 Business Logic Error in Universal Software's FlexCity/Kiosk 0.4%
- CVE-2024-0857 SQLi in Universal Software's FlexWater Corporate Water Management 0.4%