{"id":"CVE-2026-124036","published":"2026-11-10T16:17:18.630","lastModified":"2026-11-11T05:19:35.407","description":"Missing authorization checks in the visual alert feature of FlockOS, Flock's hosted public safety platform, prior to 2026-09-28, allowed an authenticated user with permission to manage saved searches in their own organization to read, modify or delete another organization's saved-search alerts and change their recipients, given the alert's identifier, and to create alerts attributed to another organization. Flock remediated the issue in the hosted service on 2026-09-28; no customer action is required.","cvssScore":7.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","cwes":["CWE-639"],"vendors":[],"products":[],"references":[{"url":"https://www.flocksafety.com/legal/security-advisories","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}