CVE-2025-59405

The Flock Safety Peripheral Android application (version 7.38.3 ) installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices contains a cleartext DataDog API key embedded within its codebase. Due to the ability to trivially decompile or inspect application binaries, a...

CVE-2025-59403

The Flock Safety Android Collins application (com.flocksafety.android.collins) version 6.35.31 for Android contains a critical authentication bypass vulnerability. The application, which manages camera feeds for Falcon , Sparrow , and Bravo devices, exposes administrative API endpoints on port 80...

CVE-2025-59406

The Flock Safety Pisco application (com.flocksafety.android.pisco ) version 6.21.11 for Android contains a cleartext Auth0 client secret embedded directly in its codebase. This application is installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices . Due to the ease...

CVE-2025-59407

The Flock Safety DetectionProcessing application (version 6.35.33 ) for Android, used on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices, contains a hardcoded password (flockhibiki17) for a bundled Java Keystore (flock_rye.bks). This vulnerability allows for the disclos...