CVE-2026-124038

An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows an attacker who has a valid technician account and controls or impersonates the camera being set up to crash the app, on devices running Android 10, 11 or 12, by returning a came...

CVE-2026-124038 Uncontrolled XML entity expansion in the Flock Installer app for Android

An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows an attacker who has a valid technician account and controls or impersonates the camera being set up to crash the app, on devices running Android 10, 11 or 12, by returning a came...

CVE-2026-124038

The Flock Installer app for Android (versions before 2.35.0 ) is vulnerable to an uncontrolled XML entity expansion (CWE-776). An attacker with a valid technician account who can control or impersonate the camera being set up can crash the application by returning a camera configuration response ...

CVE-2026-124038: Flock Flock Installer app: An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows…

An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows an attacker who has a valid technician account and controls or impersonates the camera being set up to crash the app, on devices running Android 10, 11 or 12, by returning a came...

PT-2026-141779

An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows an attacker who has a valid technician account and controls or impersonates the camera being set up to crash the app, on devices running Android 10, 11 or 12, by returning a came...