Fleetdm vulnerabilities
41 CVEs and advisories name Fleetdm as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-23999Fleet: Device lock PIN can be predicted if lock time is known
- CVE-2026-24004Fleet: Unauthenticated Android device disenrollment vulnerability via Pub/Sub endpoint
- CVE-2026-26186Fleet has a SQL injection via backtick escape in ORDER BY parameter
- CVE-2026-23518Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment
- CVE-2026-23517Fleet has an Access Control vulnerability in debug/pprof endpoints
- CVE-2026-22808Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability
- CVE-2025-27509SAML authentication vulnerability due to improper SAML response validation
- CVE-2022-24841Improper Authorization in github.com/fleetdm/fleet
- CVE-2022-23600Limited ability to spoof SAML authentication with missing audience verification
- CVE-2021-21296Denial-of-service in Fleet
- CVE-2020-26276SAML authentication vulnerability in Fleet