CVE-2026-109080

SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...

EUVD-2026-97239

SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...

CVE-2026-109080 SQL injection in Night Shift bulk license plate search allows cross-organization data access

SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...

CVE-2026-109080

The Flock Night Shift hosted service is vulnerable to a SQL injection flaw within its bulk license plate search functionality. An authenticated user could exploit this by providing a crafted license plate value to access and read data belonging to other customer organizations, specifically licens...

CVE-2026-109080: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...

Proposed anti-Flock bills could spell trouble for license plate readers

Automated license plate readers ALPRs are cameras that photograph passing vehicles, read their number plates, and typically log the time, location, and vehicle details. On their own, the images might be used to find a stolen car or locate a suspect. But lately there have been a lot of concerns...

Unidentified Flock Cameras in Florida

St. Lucie County in Florida discovered alt link a dozen Flock cameras whose ownership it can't identify, and that the county government had not permitted. I am reminded of the decade-old story of StingRay cell phone surveillance devices in Washington, DC, whose operators were also unknown. My gue...

Reverse-Engineering Flock Cameras

Hackers captured a Flock camera and got a look alternate link at the software: While much of the automatic license plate reader's ALPR most sensitive storage remained encrypted and inaccessible, the joint analysis of the recovered data shows that software running on the device explicitly detects...

Flock Offers Employees Buyouts as Customers Flee

As dozens of cities end contracts for its controversial license plate readers, Flock is rolling out a voluntary severance program, WIRED has learned...

Flock cameras are tracking people as well as cars

Flock Safety’s cameras are automated license plate readers ALPRs designed to help police find stolen cars or wanted suspects. A joint investigation by 404 Media and WIRED, based on data recovered from a physically removed Flock camera, found that its on-device software explicitly detects people a...

Flock Once Touted Its Cameras as ‘Made in the USA.’ Now It’s Not So Clear

Flock reveals little about where its license plate readers are assembled, but the answer could have geopolitical and cybersecurity implications...

Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works

A hacker collective pulled down a Flock camera and dumped its data. The files included thousands of videos and logs showing that the device captured 1.6 million images of 50,000 vehicles in 21 days...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cifs: The xid leak in cifsflock has been fixed. If flock is not used, before returning -ENOLCK, the xid should be freed; otherwise, the xid will be leaked...

You Can Now Destroy Flock Cameras for Cash in GTA V

A new GTA mod lets you smash and shoot Flock’s automatic license plate readers around the fictional Los Santos...

Automobile Camouflage to Hide from Flock Cameras

Not sure it's practical, but it's certainly striking...

Prediction Market Betting Is Getting People Banned and Arrested

This week on Uncanny Valley, we dig into the latest prediction market buzz, Flock’s AI-powered police search tool, and how tech bros don’t know how to talk about “rouge” AI agents...

This Is Flock’s AI Search Tool for Cops

WIRED rebuilt Flock’s latest search tool from code the company sends to a police officer’s browser. Its AI can keep watch across multiple cameras for anyone fitting a written description...

How an Atlanta Suburb Ended Up Sharing Flock Data With More Than 2,000 Organizations

Alpharetta, Georgia, cops share data with thousands of Flock users, ranging from federal agencies to a fish and wildlife commission. The reasons why show how vast—and invasive—the network has become...

A Georgia Cop Used Flock to Track 2 Other Cops: His Ex and Her Friend

After an affair with a fellow police officer ended, a Georgia cop used Flock to track her movements—and those of a man whose vehicle often showed up near hers, internal investigation records show...

Flock wants privacy to meet surveillance halfway

Flock Safety CEO Garrett Langley says the United States needs a “compromise” between privacy and public safety. It's a neat phrase, except I don’t like to see “compromise” and “privacy” that close together. “When people talk about just one of these, privacy or safety, they’re prioritizing the wro...