Critical severity9.8NVD Advisory· Published Oct 2, 2025· Updated Jun 17, 2026
CVE-2025-59407
CVE-2025-59407
Description
The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) bundles a Java Keystore (flock_rye.bks) along with its hardcoded password (flockhibiki17) in its code. The keystore contains a private key.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- cpe:2.3:a:flocksafety:flock_safety:6.35.33:*:*:*:*:android:*:*
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =6.35.33
- Range: =6.35.33
- Range: =6.35.33
- Range: =6.35.33
Patches
Vulnerability mechanics
References
4- gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more/nvdExploitThird Party Advisory
- gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdfnvdExploitThird Party Advisory
- www.flocksafety.com/productsnvdProduct
- www.flocksafety.com/products/license-plate-readersnvdProduct
News mentions
0No linked articles in our index yet.