CVE-2026-1619 - Vulnerability Analysis

Overview

Universal Software Inc. FlexCity/Kiosk >= 1.0 and < 1.0.36 contains an authorization bypass caused by exploitation of trusted identifiers, letting attackers bypass authorization, exploit requires user-controlled key.

Severity & Score

Impact

Attackers can bypass authorization controls, gaining unauthorized access to restricted resources.

Mitigation

Upgrade to version 1.0.36 or later.

References

• https://www.usom.gov.tr/bildirim/tr-26-0065

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Feb 13, 2026

🟠 CVE-2026-1619 - High (8.3) Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers.This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1619/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner