CVE-2026-8284
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
FlexCity software by Universal Software Inc. versions from 5.536.0 up to (but not including) 5.542.0 has an open redirect vulnerability, allowing input data manipulation.
Risk Assessment
An attacker can redirect users to a malicious site, potentially used for phishing or credential theft.
Recommendation
Update FlexCity to version 5.542.0 or later, which includes the fix.
Other vulnerabilities in FlexCity
See all- CVE-2026-8285Medium
FlexCity software by Universal Software Inc. versions from 5.536.0 up to (but not including) 5.542.0 has improper restriction of excessive authentication attempts, allowing Excessive Allocation.
- CVE-2026-6792Medium
FlexCity software by Universal Software Inc. versions from 5.536.0 up to (but not including) 5.542.0 has missing authorization, allowing exploitation of incorrectly configured access control security levels.
Original NVD description (English source)
URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 before 5.542.0.