CVE-2025-59403

CVE-2025-59403 describes a critical authentication bypass vulnerability in the Flock Safety Android Collins application (version 6.35.31), impacting Falcon, Sparrow, and Bravo camera devices. This flaw exposes administrative API endpoints on port 8080 without requiring authentication, allowing unauthenticated access to sensitive functions. The vulnerability carries a CVSS score of 9.8 (Critical) due to its network-based attack vector, low complexity, and severe potential impacts including denial of service, information disclosure, and remote code execution via ADB. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the CVE has garnered significant community discussion, indicating awareness and potential for future exploitation.