Vulnerability record · CVE-2025-59403 · published 2 October 2025

CVE-2025-59403: Flocksafety flock safety vulnerability

Flocksafety · Flock Safety

The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for Android lacks authentication. It is responsible for the camera feed on Falcon, Sparrow, and Bravo devices, but exposes administrative API endpoints on port 8080 without authentication. Endpoints include but are not limited to: /reboot, /logs, /crashpack, and /adb/enable. This results in multiple impacts including denial of service (DoS) via /reboot, information disclosure via /logs, and remote code execution (RCE) via /adb/enable. The latter specifically results in adb being started over TCP without debugging confirmation, providing an attacker in the LAN/WLAN with shell access.

9.8 CVSS 3.1 Critical EPSS 1.1% · top 36.6% CWE-749 · CWE-749

9.8CVSS 3.1 base score

1.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Flock Safety Flocksafety

References

Link	Tags
https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclos	ExploitThird Party Advisory
https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Bo	ExploitThird Party Advisory
https://www.flocksafety.com/products	Product
https://www.flocksafety.com/products/license-plate-readers	Product

Track CVE-2025-59403 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-59407Flocksafety flock safety vulnerabilityThe Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falcon and Sparrow License Plate R…EPSS 0.67%2 Oct 2025 7.5CVE-2025-59405Flocksafety flock safety information exposure vulnerabilityThe Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android (installed on Falcon and Sparrow License Plate Readers …EPSS 0.47%2 Oct 2025 6.2CVE-2025-59406Flocksafety flock safety cleartext transmission vulnerabilityThe Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo…EPSS 0.17%2 Oct 2025 7.8CVE-2018-19322GIGABYTE driver IO port access allows privilege escalationThe GPCIDrv and GDrv low-level drivers shipped with GIGABYTE APP Center, AORUS GRAPHICS ENGINE, XTREME GAMING ENGINE and OC GURU II expose IO port re…KEVEPSS 1.8%analysed21 Dec 2018 7.5CVE-2010-1428JBoss EAP Web Console access control bypass via non-GET/POST methodsThe Web Console in JBoss Enterprise Application Platform enforces access control only for GET and POST requests, so any other HTTP method bypasses th…KEVEPSS 62%analysed28 Apr 2010 5.3CVE-2010-0738JBoss JMX-Console access control bypass via non-GET/POST HTTP methodsThe JMX-Console web application in Red Hat JBoss EAP 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 enforces access control only for GET and POST re…KEVEPSS 79%analysed28 Apr 2010 7.5CVE-2006-1547Apache Struts 1 ActionForm multipart parameter denial of serviceApache Struts before 1.2.9 with BeanUtils 1.7 exposes the public getMultipartRequestHandler method through ActionForm parameter binding. A remote att…KEVEPSS 55%analysed30 Mar 2006

Source: NIST National Vulnerability Database (record CVE-2025-59403), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.