# cve.now: Fleetdm

The newest entries naming Fleetdm as an affected vendor (up to 200), of 41 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-111924](https://cve.now/CVE-2026-111924.md): Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression (CVSS 8.7)
- [CVE-2026-111923](https://cve.now/CVE-2026-111923.md): Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing (CVSS 8.7)
- [CVE-2026-103265](https://cve.now/CVE-2026-103265.md): Fleet before 4.89.0 Information Disclosure via MDM Command Results (CVSS 5.3)
- [CVE-2026-103264](https://cve.now/CVE-2026-103264.md): Fleet before 4.87.0 Authentication Bypass via Device Identifiers (CVSS 9.3)
- [CVE-2026-101047](https://cve.now/CVE-2026-101047.md): Fleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs (CVSS 6.9)
- [CVE-2026-101046](https://cve.now/CVE-2026-101046.md): Fleet before 4.89.0 SQL Injection via ORDER BY Activity Endpoints (CVSS 2.3)
- [CVE-2026-101045](https://cve.now/CVE-2026-101045.md): Fleet Homebrew Cask OS Command Injection via Metadata (CVSS 8.9)
- [CVE-2026-54245](https://cve.now/CVE-2026-54245.md): Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database (CVSS 7.6)
- [CVE-2026-46371](https://cve.now/CVE-2026-46371.md): Fleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint (CVSS 6.5)
- [CVE-2026-46370](https://cve.now/CVE-2026-46370.md): Fleet has observer-level enrollment secret extraction via ORDER BY oracle on labels host-listing endpoint (CVSS 6.5)
- [CVE-2026-41262](https://cve.now/CVE-2026-41262.md): Fleet: Cross-Team Policy Data Exposure via Global Policy Read Endpoint (CVSS 4.3)
- [CVE-2026-48786](https://cve.now/CVE-2026-48786.md): Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint (CVSS 6.5)
- [CVE-2026-46356](https://cve.now/CVE-2026-46356.md): Fleet: IP spoofing allows bypassing API rate limiting (CVSS 6.9)
- [CVE-2026-26191](https://cve.now/CVE-2026-26191.md): Fleet vulnerable to OS command injection in software packages (CVSS 6.0)
- [CVE-2026-26062](https://cve.now/CVE-2026-26062.md): Fleet server may terminate unexpectedly when handling certain gRPC requests (CVSS 8.7)
- [CVE-2026-24899](https://cve.now/CVE-2026-24899.md): Fleet Windows MDM Azure AD JWT Authentication Bypass (CVSS 8.2)
- [CVE-2026-24000](https://cve.now/CVE-2026-24000.md): Fleet has a rate limiting bypass via untrusted client IP headers (CVSS 6.9)
- [CVE-2026-23998](https://cve.now/CVE-2026-23998.md): Fleet has a Windows MDM management endpoint authentication bypass (CVSS 8.2)
- [CVE-2026-27806](https://cve.now/CVE-2026-27806.md): Fleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbit (CVSS 7.8)
- [CVE-2026-34391](https://cve.now/CVE-2026-34391.md): Fleet Vulnerable to Windows MDM cross-device command disclosure (CVSS 6.6)
- [CVE-2026-34389](https://cve.now/CVE-2026-34389.md): Fleet's user account creation via invite does not enforce invited email address (CVSS 4.9)
- [CVE-2026-34388](https://cve.now/CVE-2026-34388.md): Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint (CVSS 6.6)
- [CVE-2026-34387](https://cve.now/CVE-2026-34387.md): Fleet vulnerable to OS command injection via crafted software package metadata in uninstall scripts (CVSS 5.7)
- [CVE-2026-34386](https://cve.now/CVE-2026-34386.md): Fleet vulnerable to SQL injection in MDM bootstrap package by authenticated team or global admin (CVSS 6.3)
- [CVE-2026-34385](https://cve.now/CVE-2026-34385.md): Fleet's Apple MDM profile delivery has second-order SQL injection that can compromise the database (CVSS 6.2)
- [CVE-2026-29180](https://cve.now/CVE-2026-29180.md): Fleet's team maintainer can transfer hosts from any team via missing source team authorization (CVSS 4.9)
- [CVE-2026-26061](https://cve.now/CVE-2026-26061.md): Fleet's unbounded request body read allows remote Denial of Service (CVSS 8.7)
- [CVE-2026-26060](https://cve.now/CVE-2026-26060.md): Fleet: Password reset tokens remain valid after password change for 24 hours (CVSS 6.0)
- [CVE-2026-27465](https://cve.now/CVE-2026-27465.md): Fleet: Sensitive Google Calendar credentials disclosed to low-privileged users (CVSS 1.3)
- [CVE-2026-25963](https://cve.now/CVE-2026-25963.md): Fleet: Authorization Bypass in certificate template batch deletion for team administrators (CVSS 1.2)
- [CVE-2026-23999](https://cve.now/CVE-2026-23999.md): Fleet: Device lock PIN can be predicted if lock time is known (CVSS 0.6)
- [CVE-2026-24004](https://cve.now/CVE-2026-24004.md): Fleet: Unauthenticated Android device disenrollment vulnerability via Pub/Sub endpoint (CVSS 1.7)
- [CVE-2026-26186](https://cve.now/CVE-2026-26186.md): Fleet has a SQL injection via backtick escape in ORDER BY parameter (CVSS 5.1)
- [CVE-2026-23518](https://cve.now/CVE-2026-23518.md): Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment (CVSS 9.3)
- [CVE-2026-23517](https://cve.now/CVE-2026-23517.md): Fleet has an Access Control vulnerability in debug/pprof endpoints (CVSS 6.3)
- [CVE-2026-22808](https://cve.now/CVE-2026-22808.md): Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability (CVSS 5.5)
- [CVE-2025-27509](https://cve.now/CVE-2025-27509.md): SAML authentication vulnerability due to improper SAML response validation (CVSS 9.3)
- [CVE-2022-24841](https://cve.now/CVE-2022-24841.md): Improper Authorization in github.com/fleetdm/fleet (CVSS 6.5)
- [CVE-2022-23600](https://cve.now/CVE-2022-23600.md): Limited ability to spoof SAML authentication with missing audience verification (CVSS 5.3)
- [CVE-2021-21296](https://cve.now/CVE-2021-21296.md): Denial-of-service in Fleet (CVSS 2.7)
- [CVE-2020-26276](https://cve.now/CVE-2020-26276.md): SAML authentication vulnerability in Fleet (CVSS 10.0)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/fleetdm
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.