Vulnerabilidades en fleetdm
41 resultadosCVE-2020-26276CRITICALSAML authentication vulnerability in FleetEPSS 2.2%CVE-2021-21296LOWDenial-of-service in FleetEPSS 2.0%CVE-2026-34387MEDIUMFleet vulnerable to OS command injection via crafted software package metadata in uninstall scriptsEPSS 1.3%CVE-2022-23600MEDIUMLimited ability to spoof SAML authentication with missing audience verificationEPSS 0.9%CVE-2022-24841MEDIUMImproper Authorization in github.com/fleetdm/fleetEPSS 0.8%CVE-2026-26191MEDIUMFleet vulnerable to OS command injection in software packagesEPSS 0.8%CVE-2026-101045HIGHFleet Homebrew Cask OS Command Injection via MetadataEPSS 0.8%CVE-2025-27509CRITICALSAML authentication vulnerability due to improper SAML response validationEPSS 0.7%CVE-2026-54245HIGHFleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet databaseEPSS 0.6%CVE-2026-26061HIGHFleet's unbounded request body read allows remote Denial of ServiceEPSS 0.5%CVE-2026-48786MEDIUMFleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpointEPSS 0.4%CVE-2026-24000MEDIUMFleet has a rate limiting bypass via untrusted client IP headersEPSS 0.4%CVE-2026-24899HIGHFleet Windows MDM Azure AD JWT Authentication BypassEPSS 0.4%CVE-2026-26062HIGHFleet server may terminate unexpectedly when handling certain gRPC requestsEPSS 0.4%CVE-2026-46370MEDIUMFleet has observer-level enrollment secret extraction via ORDER BY oracle on labels host-listing endpointEPSS 0.4%CVE-2026-46371MEDIUMFleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpointEPSS 0.4%CVE-2026-111923HIGHFleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist ParsingEPSS 0.4%CVE-2026-111924HIGHFleet before 4.83.0 Denial of Service via Unbounded Gzip DecompressionEPSS 0.4%CVE-2026-26186MEDIUMFleet has a SQL injection via backtick escape in ORDER BY parameterEPSS 0.4%CVE-2026-26060MEDIUMFleet: Password reset tokens remain valid after password change for 24 hoursEPSS 0.3%