CVE-2026-124036

The FlockOS hosted public safety platform experienced a vulnerability due to missing authorization checks in its visual alert feature. An authenticated user with permissions to manage saved searches within their own organization could read, modify, delete, or change recipients for another organiz...

CVE-2026-124036: Flock FlockOS: Missing authorization checks in the visual alert feature of FlockOS, Flock's hosted public safety platform, prior to…

Missing authorization checks in the visual alert feature of FlockOS, Flock's hosted public safety platform, prior to 2026-09-28, allowed an authenticated user with permission to manage saved searches in their own organization to read, modify or delete another organization's saved-search alerts an...