FL
Product
fleet
41
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 6High 18Medium 16Low 1
Watch
Add fleet to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-26191 | 9.8 | May 14 | Fleet vulnerable to OS command injection in software packages Affected: < 4.81.1 |
| CVE-2026-34387 | 9.8 | Mar 27 | Fleet vulnerable to OS command injection via crafted software package metadata in uninstall scripts Affected: < 4.81.1 |
| CVE-2026-23518 | 9.8 | Jan 21 | Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment Affected: >= 4.78.0, < 4.78.3; >= 4.77.0, < 4.77.1; >= 4.76.0, < 4.76.2; >= 4.75.0, < 4.75.2; < 4.53.3 |
| CVE-2020-26276 | 9.8 | Dec 17 | Fleet is an open source osquery manager Affected: before 3.5.1 |
| CVE-2025-27509 | 9.3 | Mar 6 | SAML authentication vulnerability due to improper SAML response validation Affected: >= 4.64.0, < 4.64.2; >= 4.63.0, < 4.63.2; >= 4.62.0, < 4.62.4; < 4.58.1 |
| CVE-2026-103264 | 9.1 | Oct 1 | Fleet before 4.87.0 Authentication Bypass via Device Identifiers Affected: before 4.87.0 |
| CVE-2026-34386 | 8.8 | Mar 27 | Fleet vulnerable to SQL injection in MDM bootstrap package by authenticated team or global admin Affected: < 4.81.0 |
| CVE-2026-29180 | 8.8 | Mar 27 | Fleet's team maintainer can transfer hosts from any team via missing source team authorization Affected: < 4.81.1 |
| CVE-2026-26060 | 8.8 | Mar 27 | Fleet: Password reset tokens remain valid after password change for 24 hours Affected: < 4.81.0 |
| CVE-2026-26186 | 8.8 | Feb 26 | Fleet has a SQL injection via backtick escape in ORDER BY parameter Affected: < 4.80.1 |
| CVE-2026-34385 | 8.1 | Mar 27 | Fleet's Apple MDM profile delivery has second-order SQL injection that can compromise the database Affected: < 4.81.0 |
| CVE-2026-23517 | 8.1 | Jan 21 | Fleet has an Access Control vulnerability in debug/pprof endpoints Affected: >= 4.78.0, < 4.78.3; >= 4.77.0, < 4.77.1; >= 4.76.0, < 4.76.2; >= 4.75.0, < 4.75.2; < 4.53.3 |
| CVE-2022-24841 | 8.1 | Apr 18 | fleetdm/fleet is an open source device management, built on osquery Affected: before 4.13 |
| CVE-2026-101045 | 8.0 | Sep 27 | Fleet Homebrew Cask OS Command Injection via Metadata Affected: before 2026-08-19 |
| CVE-2026-27806 | 7.8 | Apr 8 | Fleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbit Affected: < 4.81.1 |
| CVE-2026-54245 | 7.6 | Aug 26 | Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database Affected: < 4.86.2 |
| CVE-2026-111924 | 7.5 | Oct 17 | Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression Affected: before 4.83.0 |
| CVE-2026-111923 | 7.5 | Oct 17 | Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing Affected: before 4.89.0 |
| CVE-2026-46356 | 7.5 | May 14 | Fleet: IP spoofing allows bypassing API rate limiting Affected: < 4.80.1 |
| CVE-2026-24899 | 7.5 | May 14 | Fleet Windows MDM Azure AD JWT Authentication Bypass Affected: < 4.82.0 |
| CVE-2026-23998 | 7.5 | May 14 | Fleet has a Windows MDM management endpoint authentication bypass Affected: < 4.81.0 |
| CVE-2026-34391 | 7.5 | Mar 27 | Fleet Vulnerable to Windows MDM cross-device command disclosure Affected: < 4.81.1 |
| CVE-2026-34388 | 7.5 | Mar 27 | Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint Affected: < 4.81.0 |
| CVE-2026-26061 | 7.5 | Mar 27 | Fleet's unbounded request body read allows remote Denial of Service Affected: < 4.81.0 |
| CVE-2026-46371 | 6.5 | Aug 26 | Fleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint Affected: < 4.84.2 |
| CVE-2026-46370 | 6.5 | Aug 26 | Fleet has observer-level enrollment secret extraction via ORDER BY oracle on labels host-listing endpoint Affected: < 4.84.2 |
| CVE-2026-48786 | 6.5 | Aug 26 | Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint Affected: < 4.87.0 |
| CVE-2026-26062 | 6.5 | May 14 | Fleet server may terminate unexpectedly when handling certain gRPC requests Affected: < 4.81.0 |
| CVE-2026-34389 | 6.5 | Mar 27 | Fleet's user account creation via invite does not enforce invited email address Affected: < 4.81.0 |
| CVE-2026-27465 | 6.5 | Feb 26 | Fleet: Sensitive Google Calendar credentials disclosed to low-privileged users Affected: < 4.80.1 |
| CVE-2026-25963 | 6.5 | Feb 26 | Fleet: Authorization Bypass in certificate template batch deletion for team administrators Affected: < 4.80.1 |
| CVE-2022-23600 | 6.5 | Feb 4 | fleet is an open source device management, built on osquery Affected: before 4.9.1 |
| CVE-2026-23999 | 5.5 | Feb 26 | Fleet: Device lock PIN can be predicted if lock time is known Affected: < 4.80.1 |
| CVE-2026-22808 | 5.4 | Jan 21 | Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability Affected: >= 4.78.0, < 4.78.2; >= 4.77.0, < 4.77.1; >= 4.76.0, < 4.76.2; < 4.53.3 |
| CVE-2026-101047 | 5.3 | Sep 27 | Fleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs Affected: before 4.87.0 |
| CVE-2026-24000 | 5.3 | May 14 | Fleet has a rate limiting bypass via untrusted client IP headers Affected: < 4.80.1 |
| CVE-2026-24004 | 5.3 | Feb 26 | Fleet: Unauthenticated Android device disenrollment vulnerability via Pub/Sub endpoint Affected: < 4.80.1 |
| CVE-2026-103265 | 4.3 | Oct 1 | Fleet before 4.89.0 Information Disclosure via MDM Command Results Affected: before 4.89.0 |
| CVE-2026-101046 | 4.3 | Sep 27 | Fleet before 4.89.0 SQL Injection via ORDER BY Activity Endpoints Affected: before 4.89.0 |
| CVE-2026-41262 | 4.3 | Aug 26 | Fleet: Cross-Team Policy Data Exposure via Global Policy Read Endpoint Affected: < 4.85.0 |
| CVE-2021-21296 | 2.7 | Feb 10 | Fleet is an open source osquery manager Affected: before 3.7.0 |
Showing 41