What’s Vulnerable › Vulnerabilities

CVE-2025-59408

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-09-25 · updated 2026-06-17
• Weakness: CWE-327

Description

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled. This allows an attacker to flash modified firmware with no cryptographic protections.

Affected products

• Flocksafety Bravo Compute Box Firmware: all versions

References

• https://gainsec.com/2025/09/19/root-from-the-coop-device-3-root-shell-on-flock-safetys-bravo-compute-box/
• https://gainsec.com/wp-content/uploads/2025/09/Root-from-the-Coop-Device-3_-Root-Shell-on-Flock-Safetys-Bravo-Compute-Box-GainSec.pdf
• https://www.flocksafety.com/products
• https://www.flocksafety.com/products/license-plate-readers

Get alerted when CVE-2025-59408 or the next vulnerability affects your stack