Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*

3 briefs RSS
low advisory

Denial of Service Vulnerability in Fleet

Fleet versions prior to 4.83.0 are susceptible to a memory exhaustion denial of service attack via crafted gzip-compressed request bodies.

Fleet +1 denial-of-service vulnerability mdm
1t 2c
critical threat

Authentication Bypass in Fleet Device API

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that allows unauthenticated attackers to spoof iOS or iPadOS devices using predictable identifiers.

exploited Fleet authentication-bypass cve-2026-103264 mdm
1t 1c
high advisory

Command Injection in Fleet macOS App Manifest Generation (CVE-2026-101045)

An improper sanitization vulnerability in Fleet's macOS app install/uninstall script generator allowed arbitrary command execution as root via malicious Homebrew cask metadata.

Fleet vulnerability command-injection macos
2t 1c