Priority MEDIUM 44
Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending gzip-compressed request bodies.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00359 · Published 2026-10-17 · Fixed in 4.83.0 CWE-409
Priority MEDIUM 44
Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00359 · Published 2026-10-17 · Fixed in 4.89.0 CWE-674
Priority LOW 23
Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00204 · Published 2026-10-01 · Fixed in 4.89.0 CWE-863
Priority MEDIUM 48
Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00311 · Published 2026-10-01 · Fixed in 4.87.0 CWE-287
Priority LOW 36
Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) with the intended random, time-limited URL token.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00244 · Published 2026-09-27 · Fixed in 4.87.0 CWE-862
Priority LOW 11
Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/{id}/activities).
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00171 · Published 2026-09-27 · Fixed in 4.89.0 CWE-89
Priority MEDIUM 42
Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata.
CVSS 4.0HIGH 8.9· Network · High privileges · No interaction · EPSS 0.0075 · Published 2026-09-27 · Fixed in 2026-08-19 CWE-78
Priority LOW 36
Fleet is an open-source device management platform built on osquery.
CVSS 4.0HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-08-26 · Fixed in 4.86.2 CWE-89
Priority LOW 29
Fleet is an open-source device management platform built on osquery.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00371 · Published 2026-08-26 · Fixed in 4.84.2 CWE-200
Priority LOW 29
Fleet is an open-source device management platform built on osquery.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00371 · Published 2026-08-26 · Fixed in 4.84.2 CWE-200
Priority MEDIUM 53
Fleet is an open-source device management platform built on osquery.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00305 · Published 2026-08-26 · Fixed in 4.85.0 CWE-863
Priority LOW 29
Fleet is an open-source device management platform built on osquery.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00438 · Published 2026-08-26 · Fixed in 4.87.0 CWE-200
Priority LOW 36
Fleet is open source device management software.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00276 · Published 2026-05-14 · Fixed in 4.80.1 CWE-290
Priority LOW 28
Fleet is open source device management software.
CVSS 4.0MEDIUM 6.0· Network · No auth · User interaction · EPSS 0.00773 · Published 2026-05-14 · Fixed in 4.81.1 CWE-78
Priority MEDIUM 44
Fleet is open source device management software.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00372 · Published 2026-05-14 · Fixed in 4.81.0 CWE-20
Priority MEDIUM 44
Fleet is open source device management software.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00381 · Published 2026-05-14 · Fixed in 4.82.0 CWE-290
Priority LOW 37
Fleet is open source device management software.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0043 · Published 2026-05-14 · Fixed in 4.80.1 CWE-290
Priority LOW 35
Fleet is open source device management software.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00214 · Published 2026-05-14 · Fixed in 4.81.0 CWE-295
Priority LOW 35
Fleet is open source device management software.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00115 · Published 2026-04-08 · Fixed in 4.81.1 CWE-78
Priority LOW 28
Fleet is open source device management software.
CVSS 4.0MEDIUM 6.6· Network · No auth · No interaction · EPSS 0.00168 · Published 2026-03-27 · Fixed in 4.81.1 CWE-488
Priority LOW 28
Fleet is open source device management software.
CVSS 4.0MEDIUM 4.9· Network · Low privileges · No interaction · EPSS 0.00192 · Published 2026-03-27 · Fixed in 4.81.0 CWE-287
Priority LOW 29
Fleet is open source device management software.
CVSS 4.0MEDIUM 6.6· Network · No auth · No interaction · EPSS 0.00273 · Published 2026-03-27 · Fixed in 4.81.0 CWE-703
Priority LOW 30
Fleet is open source device management software.
CVSS 4.0MEDIUM 5.7· Network · High privileges · User interaction · EPSS 0.01332 · Published 2026-03-27 · Fixed in 4.81.1 CWE-78
Priority LOW 36
Fleet is open source device management software.
CVSS 4.0MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.0033 · Published 2026-03-27 · Fixed in 4.81.0 CWE-89
Priority LOW 29
Fleet is open source device management software.
CVSS 4.0MEDIUM 6.2· Network · Low privileges · No interaction · EPSS 0.00205 · Published 2026-03-27 · Fixed in 4.81.0 CWE-89
Load more
THREATIST.IORead the docs