CVE-2026-103264

Mô tả

Tham khảo

• fleetdm/fleet security advisory · Vendor Advisory
• vulncheck.com/advisories/fleet-before-4.87.0-authentication-bypass-via-device-identifiers · Third Party Advisory

Lỗ hổng khác của fleet

• CVE-2026-103265TRUNG BÌNH 4.3Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped…
• CVE-2026-101047TRUNG BÌNH 5.3Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise tier only) wit…
• CVE-2026-101046TRUNG BÌNH 4.3Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities and GET /api/v1/fle…
• CVE-2026-46356CAO 7.5Fleet is open source device management software. Prior to version 4.80.1, a vulnerability in Fleet's IP extraction logic allows unauthentica…
• CVE-2026-26191NGHIÊM TRỌNG 9.8Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet's software installer pipeline could allow…