[ Vendor · 7 CVEs ]
fleetdm
CVEs affecting fleetdm published in the last 30 days, plus any fleetdm CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111923 | 17 Oct 2026 | CVSS 7.5 | fleetdm fleetFleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers… | |
| CVE-2026-111924 | 17 Oct 2026 | CVSS 7.5 | fleetdm fleetFleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending… | |
| CVE-2026-103264 | 1 Oct 2026 | CVSS 9.1 | fleetdm fleetFleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as… | |
| CVE-2026-103265 | 1 Oct 2026 | CVSS 4.3 | fleetdm fleetFleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users… | |
| CVE-2026-101046 | 27 Sep 2026 | CVSS 4.3 | fleetdm fleetFleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities and GET… | |
| CVE-2026-101047 | 27 Sep 2026 | CVSS 5.3 | fleetdm fleetFleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) with the… | |
| CVE-2026-101045 | 27 Sep 2026 | CVSS 8.0 | fleetdm fleetFleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the… |