CVE-2026-103264

概要

参考情報

• fleetdm/fleet security advisory · Vendor Advisory
• vulncheck.com/advisories/fleet-before-4.87.0-authentication-bypass-via-device-identifiers · Third Party Advisory

fleet のその他の脆弱性

• CVE-2026-103265中 4.3Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped…
• CVE-2026-101047中 5.3Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) wit…
• CVE-2026-101046中 4.3Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities and GET /api/v1/fle…
• CVE-2026-46356高 7.5Fleet is open source device management software. Prior to version 4.80.1, a vulnerability in Fleet's IP extraction logic allows unauthentica…
• CVE-2026-26191緊急 9.8Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet's software installer pipeline could allow…