CVE-2026-124036 Cross-organization access to saved-search alerts in FlockOS
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-124036?
CVE-2026-124036 is a high-severity vulnerability in FlockOS, published on 10 Nov 2026.
Official description
Missing authorization checks in the visual alert feature of FlockOS, Flock's hosted public safety platform, prior to 2026-09-28, allowed an authenticated user with permission to manage saved searches in their own organization to read, modify or delete another organization's saved-search alerts and change their recipients, given the alert's identifier, and to create alerts attributed to another organization. Flock remediated the issue in the hosted service on 2026-09-28; no customer action is required.
Weakness: CWE-639
Which versions are affected by CVE-2026-124036?
How do I fix CVE-2026-124036?
No fix has been published for CVE-2026-124036 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-124036 being exploited?
There is no known exploitation of CVE-2026-124036 in the wild and no public exploit code.
Sources
Also known as GHSA-g4xg-gv8m-6gxf.