FL
Product
fleet
2
CVEs
0
On KEV
6.3
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch
Add fleet to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-23390 | 6.3 | Oct 15 | Fleet doesn’t validate a server’s certificate when connecting through SSH Affected: 0.9.0-rc.1 before 0.10.12; 0.11.0 before 0.11.7; 0.12.0 before 0.12.2 |
| CVE-2026-75036 | 4.3 | Sep 3 | Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing Affected: 0.12.0 before 0.12.19; 0.13.0 before 0.13.15; 0.14.0 before 0.14.10; 0.15.0 before 0.15.6; 0.16.0 before 0.16.1 |
Showing 2
