Open Redirect Vulnerability in Universal Software Inc. FlexCity
CVE-2026-8284

6.1MEDIUM

Key Information:

Vendor

Universal Software Inc.

Status
Flexcity
Vendor
CVE Published:
21 July 2026

What is CVE-2026-8284?

An open redirect vulnerability in Universal Software Inc.'s FlexCity allows attackers to manipulate input data, leading to redirection to untrusted sites. This could potentially enable phishing attempts and unauthorized data access, as malicious links could be crafted to mislead users and exploit the trust in legitimate URLs. The affected versions range from 5.536.0 through 11052026, highlighting the importance of immediate patching or version upgrades to mitigate risks associated with this vulnerability.

Affected Version(s)

FlexCity 5.536.0 < 5.542.0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

İbrahim YİĞİTSOY
.