Threat database

CVE-2026-109080 is a SQL injection vulnerability in the bulk license plate search feature of the Flock Night Shift hosted service. An authenticated user could exploit this flaw to read license plate recognition data belonging to other customer organizations. The vulnerability does not allow modification of data. Flock identified and remediated the issue on 2026-08-12, and no customer action is required.

Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have cleartext storage of code.

Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have a hardcoded password for a system.

Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control.

Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system.

Flock Safety Gunshot Detection devices before 1.3 have cleartext storage of code.

Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.

Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CodeFlock FREE DOWNLOAD MANAGER free-download-manager allows Path Traversal.This issue affects FREE DOWNLOAD MANAGER: from n/a through <= 1.0.0.