CVE-2025-14349 - Vulnerability Analysis

Overview

Universal Software Inc. FlexCity/Kiosk >= 1.0 and < 1.0.36 contains a broken access control caused by missing authentication and unsafe privilege definitions, letting attackers escalate privileges and access unauthorized functionality, exploit requires no special conditions.

Severity & Score

Impact

Attackers can escalate privileges and access unauthorized functionality, potentially compromising system integrity.

Mitigation

Upgrade to version 1.0.36 or later.

References

• https://www.usom.gov.tr/bildirim/tr-26-0065

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Feb 13, 2026

🟠 CVE-2025-14349 - High (8.8) Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation.This issue affects Fl... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-14349/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner