CVE-2026-124037 | BDVDB-2026-402982 Detail
FlockFlock Safety Platform
Description#
An information exposure flaw in the public access-list sign-up feature of the Flock Safety Platform, present from 2026-06-23 to 2026-10-22, allowed a remote, unauthenticated attacker who had a community's public sign-up link and a registered vehicle's license plate to retrieve that registrant's name, email address, home address and approval status. Each lookup required solving a CAPTCHA. No license plate reader detections, images or video were exposed. Flock remediated the issue in the hosted service on 2026-10-22; no customer action is required.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.