Browse CVEs

HIGH 7.5 CVE-2026-46356 Fleet is open source device management software. Prior to version 4.80.1, a vulnerability in Fleet's IP extraction logic allows unauthenticated attac… Fleet 4.80.1+ Fix from $1,9502026-05-14 CRITICAL 9.8 CVE-2026-26191 Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet's software installer pipeline could allow a crafte… Fleet 4.81.0+ Fix from $2,3002026-05-14 MEDIUM 6.5 CVE-2026-26062 Fleet is open source device management software. Prior to version 4.81.0, Fleet contained a denial-of-service (DoS) issue in the gRPC Launcher `Publi… Fleet 4.81.0+ Fix from $1,6002026-05-14 HIGH 7.5 CVE-2026-24899 Fleet is open source device management software. Prior to version 4.82.0, a vulnerability in Fleet's Windows MDM enrollment flow allows authenticatio… Fleet 4.82.0+ Fix from $1,9502026-05-14 MEDIUM 5.3 CVE-2026-24000 Fleet is open source device management software. Prior to version 4.80.1, Fleet trusted client-supplied IP address headers when determining the sourc… Fleet 4.80.1+ Fix from $1,6002026-05-14 HIGH 7.5 CVE-2026-23998 Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet’s Windows MDM management endpoint could allow requ… Fleet 4.81.0+ Fix from $1,9502026-05-14 HIGH 7.8 CVE-2026-27806 Fleet is open source device management software. Prior to 4.81.1, the Orbit agent's FileVault disk encryption key rotation flow on collects a local u… Fleet 4.81.1+ Fix from $1,9502026-04-08 HIGH 7.5 CVE-2026-34391 Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enroll… Fleet 4.81.1+ Fix from $1,9502026-03-27 HIGH 7.5 CVE-2026-34388 Fleet is open source device management software. Prior to 4.81.0, a denial-of-service vulnerability in Fleet's gRPC Launcher endpoint allows an authe… Fleet 4.81.0+ Fix from $1,9502026-03-27 MEDIUM 6.5 CVE-2026-34389 Fleet is open source device management software. Prior to 4.81.0, Fleet contained an issue in the user invitation flow where the email address provid… Fleet 4.81.1+ Fix from $1,6002026-03-27 CRITICAL 9.8 CVE-2026-34387 Fleet is open source device management software. Prior to 4.81.1, a command injection vulnerability in Fleet's software installer pipeline allows an … Fleet 4.81.1+ Fix from $2,3002026-03-27 HIGH 8.8 CVE-2026-34386 Fleet is open source device management software. Prior to 4.81.0, a SQL injection vulnerability in Fleet's MDM bootstrap package configuration allows… Fleet 4.81.0+ Fix from $1,9502026-03-27 HIGH 8.1 CVE-2026-34385 Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injection vulnerability in Fleet's Apple MDM profile delivery pi… Fleet 4.81.0+ Fix from $1,9502026-03-27 HIGH 8.8 CVE-2026-26060 Fleet is open source device management software. Prior to 4.81.0, a vulnerability in Fleet’s password management logic could allow previously issued … Fleet 4.81.0+ Fix from $1,9502026-03-27 HIGH 8.8 CVE-2026-29180 Fleet is open source device management software. Prior to 4.81.1, a broken access control vulnerability in Fleet's host transfer API allows a team ma… Fleet 4.81.1+ Fix from $1,9502026-03-27 HIGH 7.5 CVE-2026-26061 Fleet is open source device management software. Prior to 4.81.0, Fleet contained multiple unauthenticated HTTP endpoints that read request bodies wi… Fleet 4.81.0+ Fix from $1,9502026-03-27 MEDIUM 6.5 CVE-2026-25963 Fleet is open source device management software. In versions prior to 4.80.1, a broken authorization check in Fleet’s certificate template deletion A… Fleet 4.80.1+ Fix from $1,6002026-02-26 MEDIUM 6.5 CVE-2026-27465 Fleet is open source device management software. In versions prior to 4.80.1, a vulnerability in Fleet’s configuration API could expose Google Calend… Fleet 4.80.1+ Fix from $1,6002026-02-26 MEDIUM 5.5 CVE-2026-23999 Fleet is open source device management software. In versions prior to 4.80.1, Fleet generated device lock and wipe PINs using a predictable algorithm… Fleet 4.80.1+ Fix from $1,6002026-02-26 MEDIUM 5.3 CVE-2026-24004 Fleet is open source device management software. In versions prior to 4.80.1, a vulnerability in Fleet’s Android MDM Pub/Sub handling could allow una… Fleet 4.80.1+ Fix from $1,6002026-02-26 HIGH 8.8 CVE-2026-26186 Fleet is open source device management software. A SQL injection vulnerability in versions prior to 4.80.1 allowed authenticated users to inject arbi… Fleet 4.80.1+ Fix from $1,9502026-02-26 CRITICAL 9.8 CVE-2026-23518 Fleet is open source device management software. In versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, a vulnerability in Fleet's Windows … Fleet 4.53.3 / 4.75.2+ Fix from $2,3002026-01-21 HIGH 8.1 CVE-2026-23517 Fleet is open source device management software. A broken access control issue in versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3 allowe… Fleet 4.53.3 / 4.75.2+ Fix from $1,9502026-01-21 MEDIUM 5.4 CVE-2026-22808 fleetdm/fleet is open source device management software. Prior to versions 4.78.2, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, if Windows MDM is enabled, an … Fleet 4.53.3 / 4.75.2+ Fix from $1,6002026-01-21 HIGH 8.1 CVE-2022-24841 fleetdm/fleet is an open source device management, built on osquery. All versions of fleet making use of the teams feature are affected by this autho… Fleet 4.13+ Fix from $1,9502022-04-18 MEDIUM 6.5 CVE-2022-23600 fleet is an open source device management, built on osquery. Versions prior to 4.9.1 expose a limited ability to spoof SAML authentication with missi… Fleet 4.9.1+ Fix from $1,6002022-02-04 CRITICAL 9.8 CVE-2020-26276 Fleet is an open source osquery manager. In Fleet before version 3.5.1, due to issues in Go's standard library XML parsing, a valid SAML response may… Fleet 3.5.1+ Fix from $2,3002020-12-17