Information Exposure in Flock Safety Platform's Public Sign-Up Feature
CVE-2026-124037

8.2HIGH

Key Information:

Vendor

Flock

Status
Flock Safety Platform
Vendor
CVE Published:
10 November 2026

Badges

👾 Exploit Exists

What is CVE-2026-124037?

An information exposure flaw was identified in the public access-list sign-up feature of the Flock Safety Platform. This vulnerability allowed unauthorized remote attackers who possessed a community's public sign-up link and the license plate of a registered vehicle to access sensitive data, including the registrant's name, email address, home address, and approval status. Each lookup was gated behind a CAPTCHA challenge. It’s important to note that no images, video footage, or license plate reader detections were compromised. The issue was resolved by Flock Safety on October 22, 2026, with no action required from customers.

Affected Version(s)

Flock Safety Platform 2026-06-23 < 2026-10-22

References

https://www.flocksafety.com/legal/security-advisories
vendor-advisory

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.