Flocksafety develops a portfolio of physical security and surveillance products including gunshot detection, license-plate reading, and compute appliances that are deployed in law enforcement and public-safety contexts. Vulnerabilities affecting the vendor skew toward serious outcomes, with a meaningful share reaching critical severity, and recur across the firmware and hardware interfaces through weakness classes centered on cleartext storage and transmission of sensitive data, hard-coded credentials, and improper access controls on debug interfaces—exposures that are particularly consequential in security-critical devices intended to protect physical infrastructure. Defenders should treat firmware updates and network segmentation of these appliances as high-priority, particularly where they handle sensitive identification data or maintain law-enforcement access; current severity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Flocksafety over time
Signals from CVEs in this vendor scope (15 CVEs).
15 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-59403CRITICAL The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for Android lacks authentication. It is responsible for the camera feed on Falcon, Sparro | Oct 2, 2025 | 9.8 | 35 | NO | NO |
CVE-2025-59407CRITICAL The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Comput | Oct 2, 2025 | 9.8 | 34 | NO | NO |
CVE-2025-59405HIGH The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devic | Oct 2, 2025 | 7.5 | 26 | NO | NO |
CVE-2025-59404HIGH Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked. This permits bypass of Android Verified Boot (AVB) and allows direct modifi | Sep 25, 2025 | 7.5 | 26 | NO | NO |
CVE-2025-59409HIGH Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials (test_flck) stored in cleartext in production firmware. | Oct 2, 2025 | 7.5 | 25 | NO | NO |
CVE-2025-59408HIGH Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic prote | Sep 25, 2025 | 7.3 | 25 | NO | NO |
CVE-2025-59406MEDIUM The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) has a | Oct 2, 2025 | 6.2 | 23 | NO | NO |
CVE-2025-59402MEDIUM Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables attackers with physic | Sep 25, 2025 | 5.4 | 21 | NO | NO |
CVE-2025-47822MEDIUM Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control. | Jun 27, 2025 | 6.8 | 21 | NO | NO |
CVE-2025-47819MEDIUM Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control. | Jun 27, 2025 | 6.8 | 20 | NO | NO |
Signals from CVEs in this vendor scope (15 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Flocksafety.
Media articles that mention a CVE ID that affects a product developed by Flocksafety — matched by CVE ID, not by vendor name.