CVE-2026-8285
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
FlexCity software by Universal Software Inc. versions from 5.536.0 up to (but not including) 5.542.0 has improper restriction of excessive authentication attempts, allowing Excessive Allocation.
Risk Assessment
An attacker can repeatedly attempt authentication without limits, potentially exhausting system resources and causing denial of service (DoS).
Recommendation
Update FlexCity to version 5.542.0 or later, which includes the fix.
Other vulnerabilities in FlexCity
See all- CVE-2026-8284Medium
FlexCity software by Universal Software Inc. versions from 5.536.0 up to (but not including) 5.542.0 has an open redirect vulnerability, allowing input data manipulation.
- CVE-2026-6792Medium
FlexCity software by Universal Software Inc. versions from 5.536.0 up to (but not including) 5.542.0 has missing authorization, allowing exploitation of incorrectly configured access control security levels.
Original NVD description (English source)
Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excessive Allocation. This issue affects FlexCity: from 5.536.0 before 5.542.0.