The vulnerability CVE-2026-8285 in FlexCity version 5.536.0 is due to improper restriction of excessive authentication attempts (CWE-307). This weakness allows an attacker to cause excessive allocation, potentially leading to denial of service conditions. The CVSS v3.1 base score is 4.3 (medium), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but availability impact is low. No patch or official remediation level has been disclosed by Universal Software Inc. as of the publication date.

The vulnerability can cause availability degradation due to excessive allocation triggered by repeated authentication attempts. There is no impact on confidentiality or integrity. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing external rate limiting or monitoring authentication attempts to reduce the risk of excessive allocation.