DeutschShown in its original language — a full translation is planned for a future version.
Fleet: Mehrere Schwachstellen
view advisory published 2026-05-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Fleet ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-46356US | high7.5 | — | ||
Fleet is open source device management software. Prior to version 4.80.1, a vulnerability in Fleet's IP extraction logic allows unauthenticated attackers to bypass API rate limitin… | ||||
| CVE-2026-26191US | critical9.8 | — | ||
Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet's software installer pipeline could allow a crafted software package to execute a… | ||||
| CVE-2026-26062US | medium6.5 | — | ||
Fleet is open source device management software. Prior to version 4.81.0, Fleet contained a denial-of-service (DoS) issue in the gRPC Launcher `PublishLogs` endpoint. In affected v… | ||||
| CVE-2026-24899US | high7.5 | — | ||
Fleet is open source device management software. Prior to version 4.82.0, a vulnerability in Fleet's Windows MDM enrollment flow allows authentication tokens from any Azure AD tena… | ||||
| CVE-2026-24000US | medium5.3 | — | ||
Fleet is open source device management software. Prior to version 4.80.1, Fleet trusted client-supplied IP address headers when determining the source IP for incoming requests. Thi… | ||||
| CVE-2026-23998US | high7.5 | — | ||
Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet’s Windows MDM management endpoint could allow requests to be processed without pr… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-2rc4-7jc6-qffh vom 2026-05-14external
- GitHub Security Advisory GHSA-9vcr-g537-3w5v vom 2026-05-14external
- GitHub Security Advisory GHSA-ffg9-j72f-j6xm vom 2026-05-14external
- GitHub Security Advisory GHSA-j8h8-75h3-jg53 vom 2026-05-14external
- GitHub Security Advisory GHSA-mxmp-wr3w-rvqx vom 2026-05-14external
- GitHub Security Advisory GHSA-x67p-9m2r-fxqv vom 2026-05-14external
- WID-SEC-W-2026-1553 - CSAF Versionself
- WID-SEC-2026-1553 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan