CVE-2026-6792
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
FlexCity software by Universal Software Inc. versions from 5.536.0 up to (but not including) 5.542.0 has missing authorization, allowing exploitation of incorrectly configured access control security levels.
Risk Assessment
An attacker can gain unauthorized access to functions or data that should be protected, potentially leading to confidentiality and integrity breaches.
Recommendation
Update FlexCity to version 5.542.0 or later, which includes the fix.
Other vulnerabilities in FlexCity
See all- CVE-2026-8285Medium
FlexCity software by Universal Software Inc. versions from 5.536.0 up to (but not including) 5.542.0 has improper restriction of excessive authentication attempts, allowing Excessive Allocation.
- CVE-2026-8284Medium
FlexCity software by Universal Software Inc. versions from 5.536.0 up to (but not including) 5.542.0 has an open redirect vulnerability, allowing input data manipulation.
Original NVD description (English source)
Missing Authorization vulnerability in Universal Software Inc. FlexCity allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexCity: from 5.536.0 before 5.542.0.