The vulnerability CVE-2026-8284 in FlexCity (version 5.536.0) is an open redirect issue where the application improperly handles URL redirection, allowing input data manipulation to redirect users to untrusted external websites. This can potentially be used in phishing or social engineering attacks to trick users into visiting malicious sites. The CVSS vector indicates it is remotely exploitable over the network without privileges, requires user interaction, and impacts confidentiality and integrity with no impact on availability. No official patch or remediation guidance is currently provided by the vendor.

Successful exploitation could lead to users being redirected to malicious websites, potentially resulting in phishing attacks or exposure to malicious content. The confidentiality and integrity of user interactions may be partially compromised, but there is no direct impact on system availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should be cautious of suspicious links and verify URLs before clicking. No vendor-provided mitigation or temporary fix is currently documented.