CVE-2026-34387

概要

参考情報

• fleetdm/fleet security advisory · Vendor Advisory

fleet のその他の脆弱性

• CVE-2026-103265中 4.3Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped…
• CVE-2026-103264緊急 9.1Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as…
• CVE-2026-101047中 5.3Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) wit…
• CVE-2026-101046中 4.3Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities and GET /api/v1/fle…
• CVE-2026-46356高 7.5Fleet is open source device management software. Prior to version 4.80.1, a vulnerability in Fleet's IP extraction logic allows unauthentica…