Skip to content
Flock Gains CVE Authority Amid Controversy Over Trustworthiness

Flock Gains CVE Authority Amid Controversy Over Trustworthiness

First seen 12 Oct 2026, 23:30 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 13, 2026 at 00:31 UTC
  • •Flock is now a CVE Numbering Authority, enabling it to assign CVE IDs for its products.
  • •The company's credibility as a CNA is questioned due to past controversies over privacy and misuse.
  • •Flock aims to improve vulnerability disclosure processes but faces skepticism from security experts.

Flock, a public safety technology company, has been authorized by CISA as a CVE Numbering Authority (CNA), allowing it to assign CVE IDs to vulnerabilities in its products. This designation aims to streamline the process of vulnerability disclosure and improve communication with security researchers. However, Flock's history of privacy concerns and law enforcement misuse of its technology raises questions about its credibility as a CNA. Experts emphasize that the effectiveness of Flock's vulnerability records will depend on their accuracy and transparency. Flock has faced scrutiny for previous vulnerabilities in its surveillance products, which were reported but not deemed material due to requiring physical access. The company has published a vulnerability disclosure policy and plans to maintain a security advisories page for transparency. Security researchers are expected to continue disclosing vulnerabilities independently of Flock, which could further complicate trust in the company's records.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-06
Flock authorized as CVE Numbering Authority
CISA granted Flock the authority to assign CVE IDs, enhancing its role in vulnerability management.
Flocksafety
2026-10-12
Flock's CNA role raises trust issues
Concerns arise regarding Flock's ability to accurately manage its own vulnerability disclosures.
Cyberscoop

More articles in this cluster (2)

Following this threat?

Track Flock in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 2

Common questions

What does being a CNA mean for Flock?
As a CNA, Flock can assign CVE IDs to vulnerabilities in its products, streamlining the disclosure process.
What are the concerns regarding Flock's CNA status?
Flock's past controversies over privacy and law enforcement misuse raise doubts about its trustworthiness in managing vulnerability disclosures.
How will this affect security researchers?
Researchers may continue to disclose vulnerabilities independently, which could lead to discrepancies in Flock's vulnerability records.