This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-124037 | BDVDB-2026-402982 Detail

FlockFlock Safety Platform

Description#

An information exposure flaw in the public access-list sign-up feature of the Flock Safety Platform, present from 2026-06-23 to 2026-10-22, allowed a remote, unauthenticated attacker who had a community's public sign-up link and a registered vehicle's license plate to retrieve that registrant's name, email address, home address and approval status. Each lookup required solving a CAPTCHA. No license plate reader detections, images or video were exposed. Flock remediated the issue in the hosted service on 2026-10-22; no customer action is required.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-359 Exposure of Private Personal Information to an Unauthorized Actor

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.