Vulnerability index

Browse CVEs

27 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Fleet HIGH 7.5
CVE-2026-46356

Fleet is open source device management software. Prior to version 4.80.1, a vulnerability in Fleet's IP extraction logic allows unauthenticated attac…

Fix: 4.80.1+
Fix from $1,950 2026-05-14
Fleet CRITICAL 9.8
CVE-2026-26191

Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet's software installer pipeline could allow a crafte…

Fix: 4.81.0+
Fix from $2,300 2026-05-14
Fleet MEDIUM 6.5
CVE-2026-26062

Fleet is open source device management software. Prior to version 4.81.0, Fleet contained a denial-of-service (DoS) issue in the gRPC Launcher `Publi…

Fix: 4.81.0+
Fix from $1,600 2026-05-14
Fleet HIGH 7.5
CVE-2026-24899

Fleet is open source device management software. Prior to version 4.82.0, a vulnerability in Fleet's Windows MDM enrollment flow allows authenticatio…

Fix: 4.82.0+
Fix from $1,950 2026-05-14
Fleet MEDIUM 5.3
CVE-2026-24000

Fleet is open source device management software. Prior to version 4.80.1, Fleet trusted client-supplied IP address headers when determining the sourc…

Fix: 4.80.1+
Fix from $1,600 2026-05-14
Fleet HIGH 7.5
CVE-2026-23998

Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet’s Windows MDM management endpoint could allow requ…

Fix: 4.81.0+
Fix from $1,950 2026-05-14
Fleet HIGH 7.8
CVE-2026-27806

Fleet is open source device management software. Prior to 4.81.1, the Orbit agent's FileVault disk encryption key rotation flow on collects a local u…

Fix: 4.81.1+
Fix from $1,950 2026-04-08
Fleet HIGH 7.5
CVE-2026-34391

Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enroll…

Fix: 4.81.1+
Fix from $1,950 2026-03-27
Fleet HIGH 7.5
CVE-2026-34388

Fleet is open source device management software. Prior to 4.81.0, a denial-of-service vulnerability in Fleet's gRPC Launcher endpoint allows an authe…

Fix: 4.81.0+
Fix from $1,950 2026-03-27
Fleet MEDIUM 6.5
CVE-2026-34389

Fleet is open source device management software. Prior to 4.81.0, Fleet contained an issue in the user invitation flow where the email address provid…

Fix: 4.81.1+
Fix from $1,600 2026-03-27
Fleet CRITICAL 9.8
CVE-2026-34387

Fleet is open source device management software. Prior to 4.81.1, a command injection vulnerability in Fleet's software installer pipeline allows an …

Fix: 4.81.1+
Fix from $2,300 2026-03-27
Fleet HIGH 8.8
CVE-2026-34386

Fleet is open source device management software. Prior to 4.81.0, a SQL injection vulnerability in Fleet's MDM bootstrap package configuration allows…

Fix: 4.81.0+
Fix from $1,950 2026-03-27
Fleet HIGH 8.1
CVE-2026-34385

Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injection vulnerability in Fleet's Apple MDM profile delivery pi…

Fix: 4.81.0+
Fix from $1,950 2026-03-27
Fleet HIGH 8.8
CVE-2026-26060

Fleet is open source device management software. Prior to 4.81.0, a vulnerability in Fleet’s password management logic could allow previously issued …

Fix: 4.81.0+
Fix from $1,950 2026-03-27
Fleet HIGH 8.8
CVE-2026-29180

Fleet is open source device management software. Prior to 4.81.1, a broken access control vulnerability in Fleet's host transfer API allows a team ma…

Fix: 4.81.1+
Fix from $1,950 2026-03-27
Fleet HIGH 7.5
CVE-2026-26061

Fleet is open source device management software. Prior to 4.81.0, Fleet contained multiple unauthenticated HTTP endpoints that read request bodies wi…

Fix: 4.81.0+
Fix from $1,950 2026-03-27
Fleet MEDIUM 6.5
CVE-2026-25963

Fleet is open source device management software. In versions prior to 4.80.1, a broken authorization check in Fleet’s certificate template deletion A…

Fix: 4.80.1+
Fix from $1,600 2026-02-26
Fleet MEDIUM 6.5
CVE-2026-27465

Fleet is open source device management software. In versions prior to 4.80.1, a vulnerability in Fleet’s configuration API could expose Google Calend…

Fix: 4.80.1+
Fix from $1,600 2026-02-26
Fleet MEDIUM 5.5
CVE-2026-23999

Fleet is open source device management software. In versions prior to 4.80.1, Fleet generated device lock and wipe PINs using a predictable algorithm…

Fix: 4.80.1+
Fix from $1,600 2026-02-26
Fleet MEDIUM 5.3
CVE-2026-24004

Fleet is open source device management software. In versions prior to 4.80.1, a vulnerability in Fleet’s Android MDM Pub/Sub handling could allow una…

Fix: 4.80.1+
Fix from $1,600 2026-02-26
Fleet HIGH 8.8
CVE-2026-26186

Fleet is open source device management software. A SQL injection vulnerability in versions prior to 4.80.1 allowed authenticated users to inject arbi…

Fix: 4.80.1+
Fix from $1,950 2026-02-26
Fleet CRITICAL 9.8
CVE-2026-23518

Fleet is open source device management software. In versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, a vulnerability in Fleet's Windows …

Fix: 4.53.3 / 4.75.2+
Fix from $2,300 2026-01-21
Fleet HIGH 8.1
CVE-2026-23517

Fleet is open source device management software. A broken access control issue in versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3 allowe…

Fix: 4.53.3 / 4.75.2+
Fix from $1,950 2026-01-21
Fleet MEDIUM 5.4
CVE-2026-22808

fleetdm/fleet is open source device management software. Prior to versions 4.78.2, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, if Windows MDM is enabled, an …

Fix: 4.53.3 / 4.75.2+
Fix from $1,600 2026-01-21
Fleet HIGH 8.1
CVE-2022-24841

fleetdm/fleet is an open source device management, built on osquery. All versions of fleet making use of the teams feature are affected by this autho…

Fix: 4.13+
Fix from $1,950 2022-04-18
Fleet MEDIUM 6.5
CVE-2022-23600

fleet is an open source device management, built on osquery. Versions prior to 4.9.1 expose a limited ability to spoof SAML authentication with missi…

Fix: 4.9.1+
Fix from $1,600 2022-02-04
Fleet CRITICAL 9.8
CVE-2020-26276

Fleet is an open source osquery manager. In Fleet before version 3.5.1, due to issues in Go's standard library XML parsing, a valid SAML response may…

Fix: 3.5.1+
Fix from $2,300 2020-12-17