CVE-2026-8284: Universal Software Inc Flexcity

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 before 5.542.0.

Affected products

• Universal Software Inc Flexcity: from 5.536.0, before 5.542.0 (fixed in 5.542.0)

Published 2026-07-21. Last modified 2026-07-28.