Login Request a demo
FL
Product
fleet
by fleetdm · last CVE Oct 17, 2026
41
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Vulnerabilities41In the news0Timeline
Severity mix
Critical 6High 18Medium 16Low 1
Severity
All severities41Critical6High18Medium16Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add fleet to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-26191
9.8
1%
May 14
Fleet vulnerable to OS command injection in software packages
Affected: < 4.81.1
CVE-2026-34387
9.8
1%
Mar 27
Fleet vulnerable to OS command injection via crafted software package metadata in uninstall scripts
Affected: < 4.81.1
CVE-2026-23518
9.8
0%
Jan 21
Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment
Affected: >= 4.78.0, < 4.78.3; >= 4.77.0, < 4.77.1; >= 4.76.0, < 4.76.2; >= 4.75.0, < 4.75.2; < 4.53.3
CVE-2020-26276
9.8
2%
Dec 17
Fleet is an open source osquery manager
Affected: before 3.5.1
CVE-2025-27509
9.3
1%
Mar 6
SAML authentication vulnerability due to improper SAML response validation
Affected: >= 4.64.0, < 4.64.2; >= 4.63.0, < 4.63.2; >= 4.62.0, < 4.62.4; < 4.58.1
CVE-2026-103264
9.1
0%
Oct 1
Fleet before 4.87.0 Authentication Bypass via Device Identifiers
Affected: before 4.87.0
Showing 6