fleetdm vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20211
3. 20222
4. 20251
5. 202636

Newest CVEs

• CVE-2026-111924

  Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression

  fleetdm · fleet

  High8.7
• CVE-2026-111923

  Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing

  fleetdm · fleet

  High8.7
• CVE-2026-103265

  Fleet before 4.89.0 Information Disclosure via MDM Command Results

  fleetdm · fleet

  Medium5.3
• CVE-2026-103264

  Fleet before 4.87.0 Authentication Bypass via Device Identifiers

  fleetdm · fleet

  Critical9.3
• CVE-2026-101047

  Fleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs

  fleetdm · fleet

  Medium6.9
• CVE-2026-101046

  Fleet before 4.89.0 SQL Injection via ORDER BY Activity Endpoints

  fleetdm · fleet

  Low2.3
• CVE-2026-101045

  Fleet Homebrew Cask OS Command Injection via Metadata

  fleetdm · fleet

  High8.9
• CVE-2026-54245

  Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

  fleetdm · fleet

  High7.6
• CVE-2026-46371

  Fleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint

  fleetdm · fleet

  Medium6.5
• CVE-2026-46370

  Fleet has observer-level enrollment secret extraction via ORDER BY oracle on labels host-listing endpoint

  fleetdm · fleet

  Medium6.5