{"id":"CVE-2026-109080","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-109080","generatedAt":"2026-10-28T05:28:22.665Z","title":"SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value.","description":"SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue through internal security review and remediated it on 2026-08-12; no customer action is required.","published":"2026-10-12T06:17:00.000Z","lastModified":"2026-10-16T17:25:58.000Z","status":"Awaiting Analysis","sourceIdentifier":"12dd0b25-a5e8-4486-84b1-59c4a6ebd552","cvss":{"version":"4.0","score":7.1,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-89"],"affected":[],"epss":{"score":0.00215,"percentile":0.11852,"date":"2026-10-27","history":[{"date":"2026-10-12","score":0.00215,"percentile":0.11014}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-12T06:17:00.000Z","detail":{"score":"7.1","severity":"HIGH","publishedAt":"2026-10-12T06:17:00.103Z"},"summary":"New CVE, high severity (CVSS 7.1)."}],"references":[{"url":"https://www.flocksafety.com/legal/security-advisories","source":"12dd0b25-a5e8-4486-84b1-59c4a6ebd552"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-109080","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}