DeutschShown in its original language — a full translation is planned for a future version.
Fleet: Mehrere Schwachstellen
view advisory published 2026-08-11
Ein Angreifer kann mehrere Schwachstellen in Fleet ausnutzen, um SQL-Injection durchzuführen, beliebigen Code auszuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-54245US | — | — | ||
Fleet is an open-source device management platform built on osquery. In versions prior to 4.86.2, the Okta conditional access integration in Fleet Premium is vulnerable to SQL inje… | ||||
| CVE-2026-48786US | — | — | ||
Fleet is an open-source device management platform built on osquery. In versions prior to 4.87.0, the target search endpoint (POST /api/latest/fleet/targets) returned unmasked team… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-7q96-f8xw-jv5j vom 2026-08-11external
- GitHub Security Advisory GHSA-88p2-jj8w-j8qg vom 2026-08-11external
- GitHub Security Advisory GHSA-q9c5-pp7m-fm2g vom 2026-08-11external
- GitHub Security Advisory GHSA-rxhg-vcww-2mpw vom 2026-08-11external
- WID-SEC-W-2026-2788 - CSAF Versionself
- WID-SEC-2026-2788 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan