İbrahim Yi̇ği̇tsoy

**Name of the Vulnerable Software and Affected Versions** E-Municipality versions 20251127 through 20260203 **Description** An authentication bypass exists in Universal Software Inc. E-Municipality that allows the exploitation of trusted identifiers. This flaw enables an attacker to circumvent authentication mechanisms by manipulating identifiers that the system trusts. **Recommendations** Update E-Municipality to version 20260204 or later.

**Name of the Vulnerable Software and Affected Versions** FlexCity versions 5.536.0 through 5.541.0 **Description** An open redirect issue allows input data manipulation by redirecting users to untrusted sites. **Recommendations** Update FlexCity to version 5.542.0.

**Name of the Vulnerable Software and Affected Versions** FlexCity versions 5.536.0 through 5.541.0 **Description** Improper restriction of excessive authentication attempts allows Excessive Allocation, a condition where a system allocates more resources than necessary or available, potentially leading to resource exhaustion. **Recommendations** Update FlexCity to version 5.542.0 or later.

**Name of the Vulnerable Software and Affected Versions** FlexCity versions 5.536.0 through 5.541.0 **Description** Missing authorization allows for the exploitation of incorrectly configured access control security levels. **Recommendations** Update FlexCity to version 5.542.0 or later.

Incorrect Authorization vulnerability in E-Kalite Software Hardware Engineering Design and Internet Services Industry and Trade Ltd. Co. Turboard FOR-S allows Privilege Escalation. This issue affects Turboard FOR-S: from 7.01.2026 before 18.02.2026.

**Name of the Vulnerable Software and Affected Versions** Universal Software Inc. FlexCity/Kiosk versions prior to 1.0.36 **Description** An authorization bypass exists in FlexCity/Kiosk due to exploitation of trusted identifiers through a user-controlled key. This allows unauthorized access. **Recommendations** Update FlexCity/Kiosk to version 1.0.36 or later.

**Name of the Vulnerable Software and Affected Versions** Universal Software Inc. FlexCity/Kiosk versions prior to 1.0.36 **Description** A flaw exists in Universal Software Inc. FlexCity/Kiosk that allows accessing functionality not properly constrained by Access Control Lists (ACLs), potentially leading to privilege escalation. The issue stems from privileges defined with unsafe actions and missing authentication for a critical function. **Recommendations** Update FlexCity/Kiosk to version 1.0.36 or later.

**Name of the Vulnerable Software and Affected Versions** Universal Software Inc. FlexCity/Kiosk versions prior to 1.0.36 **Description** An authentication bypass issue exists in Universal Software Inc. FlexCity/Kiosk, potentially allowing privilege escalation. The issue involves using an alternate path or channel to bypass normal authentication procedures. **Recommendations** Update FlexCity/Kiosk to version 1.0.36 or later.

**Name of the Vulnerable Software and Affected Versions** StarCities versions prior to 1.1.61 **Description** StarCities is subject to Reflected Cross-site Scripting (XSS), a condition where improper neutralization of input during web page generation allows an attacker to execute malicious scripts in the victim's browser. **Recommendations** Update to version 1.1.61.

**Name of the Vulnerable Software and Affected Versions** Premierturk Information Technologies Inc. Excavation Management Information System versions prior to 10.2025.01 **Description** A condition exists that allows exposure of private personal information to an unauthorized actor and enables functionalities such as footprinting and functionality misuse. The issue grants unauthenticated, remote access to sensitive files. **Recommendations** Update to a version prior to 10.2025.01.

**Name of the Vulnerable Software and Affected Versions** Saysis Web Portal versions 3.1.9 through 3.2.0 **Description** A Path Traversal issue exists in Saysis Web Portal. The issue allows unauthorized access due to improper limitation of a pathname to a restricted directory. **Recommendations** Update to version 3.2.1.