Flock Safety gains authority to issue CVEs for its own products

Flock Safety, a manufacturer of surveillance systems including AI-powered cameras and automated license plate readers (ALPRs), has joined the CVE Program as a CVE Numbering Authority (CNA). This designation grants the company the power to assign CVE IDs to vulnerabilities found in its own products and grade those defects internally.

Chris Castaldo, Flock’s chief information security officer, stated that the move allows the company to respond faster to researcher findings, reduce confusion from duplicate entries, and provide customers with a single source for security information.

The company’s new role comes amid ongoing public and legal scrutiny regarding privacy concerns and reports of law enforcement misuse of its technology. Security experts note that while many vendors are granted CNA authority, the effectiveness of Flock in this role will depend on whether its records provide sufficient detail and accuracy for cities, police departments, and the public to track and mitigate specific risks.