CVE-2026-124037 Information exposure in Flock Safety Platform public access-list sign-up
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-124037?
CVE-2026-124037 is a high-severity vulnerability in Flock Safety Platform, published on 10 Nov 2026.
Official description
An information exposure flaw in the public access-list sign-up feature of the Flock Safety Platform, present from 2026-06-23 to 2026-10-22, allowed a remote, unauthenticated attacker who had a community's public sign-up link and a registered vehicle's license plate to retrieve that registrant's name, email address, home address and approval status. Each lookup required solving a CAPTCHA. No license plate reader detections, images or video were exposed. Flock remediated the issue in the hosted service on 2026-10-22; no customer action is required.
Weakness: CWE-359
Which versions are affected by CVE-2026-124037?
How do I fix CVE-2026-124037?
No fix has been published for CVE-2026-124037 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-124037 being exploited?
There is no known exploitation of CVE-2026-124037 in the wild and no public exploit code.
Sources
Also known as GHSA-496f-rcq4-w2g9.