Skip to content
Threat Feed
Subscribe

Tag

Mdm

3 briefs RSS
rumour rumour

NachoMDM Vulnerability in Windows MDM Enrollment

NachoMDM is a vulnerability within the Windows Mobile Device Management (MDM) enrollment process that allows an attacker to achieve UAC bypass and execute arbitrary code with SYSTEM privileges.

Windows Mobile Device Management privilege-escalation windows mdm
2t
high threat

Fleet Windows MDM Management Endpoint Authentication Bypass Vulnerability

CVE-2026-23998 describes a vulnerability in Fleet's Windows MDM management endpoint that allows requests to be processed without proper client certificate validation, potentially allowing an attacker to impersonate a device and retrieve sensitive configuration data.

fleet authentication-bypass credential-access mdm
2r 2t 1i
high threat

Fleet Windows MDM Azure AD JWT Authentication Bypass Vulnerability

A vulnerability in Fleet versions prior to 4.82.0 allows authentication tokens from any Azure AD tenant to be accepted, enabling unauthorized device enrollment and MDM API access due to improper JWT signature validation, tracked as CVE-2026-24899.

fleetdm/fleet/v4 +1 jwt azuread authentication bypass mdm fleetdm
2r 2t 1i