fleetdm Fleet

Name: fleetdm Fleet
Brand: fleetdm

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

4critical13high9medium1low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-27509US	—	0.67% (52nd)	Exploit	4.62.4	2025-03-06	4 versions
CVE-2020-26276US	critical9.8	2.20% (82nd)	—	no fix	2020-12-17	≤ < 3.5.1
CVE-2021-21296US	low2.7	1.94% (80th)	—	no fix	2021-02-10	≤ < 3.7.0
CVE-2026-34387US	critical9.8	1.33% (71st)	—	no fix	2026-03-27	≤ < 4.81.1
CVE-2022-23600US	medium6.5	0.90% (59th)	—	no fix	2022-02-04	≤ < 4.9.1
CVE-2022-24841US	high8.1OT elevated	0.85% (58th)	—	no fix	2022-04-18	≤ < 4.13
CVE-2026-26191US	critical9.8	0.77% (56th)	—	no fix	2026-05-14	≤ < 4.81.1
CVE-2026-26061US	high7.5	0.45% (39th)	—	no fix	2026-03-27	≤ < 4.81.0
CVE-2026-24000US	medium5.3	0.43% (37th)	—	no fix	2026-05-14	≤ < 4.80.1
CVE-2026-24899US	high7.5	0.38% (32nd)	—	no fix	2026-05-14	≤ < 4.82.0
CVE-2026-26062US	medium6.5	0.37% (31st)	—	no fix	2026-05-14	≤ < 4.81.0
CVE-2026-26186US	high8.8	0.35% (28th)	—	no fix	2026-02-26	≤ < 4.80.1
CVE-2026-26060US	high8.8	0.35% (28th)	—	no fix	2026-03-27	≤ < 4.81.0
CVE-2026-34386US	high8.8	0.33% (26th)	—	no fix	2026-03-27	≤ < 4.81.0
CVE-2026-29180US	high8.8OT elevated	0.33% (26th)	—	no fix	2026-03-27	≤ < 4.81.1
CVE-2026-24004US	medium5.3OT elevated	0.30% (22nd)	—	no fix	2026-02-26	≤ < 4.80.1
CVE-2026-23517US	high8.1OT elevated	0.29% (22nd)	—	4.76.2	2026-01-21	5 versions
CVE-2026-46356US	high7.5	0.28% (20th)	—	no fix	2026-05-14	≤ < 4.80.1
CVE-2026-27465US	medium6.5	0.27% (20th)	—	no fix	2026-02-26	≤ < 4.80.1
CVE-2026-34388US	high7.5	0.27% (20th)	—	no fix	2026-03-27	≤ < 4.81.0
CVE-2026-23518US	critical9.8	0.25% (17th)	—	4.76.2	2026-01-21	5 versions
CVE-2026-22808US	medium5.4	0.25% (16th)	—	4.78.2	2026-01-21	4 versions
CVE-2026-23998US	high7.5	0.21% (12th)	—	no fix	2026-05-14	≤ < 4.81.0
CVE-2026-25963US	medium6.5OT elevated	0.21% (11th)	—	no fix	2026-02-26	≤ < 4.80.1
CVE-2026-34385US	high8.1	0.21% (10th)	—	no fix	2026-03-27	≤ < 4.81.0
CVE-2026-34389US	medium6.5	0.19% (9th)	—	no fix	2026-03-27	≤ < 4.81.0
CVE-2026-34391US	high7.5	0.17% (6th)	—	no fix	2026-03-27	≤ < 4.81.1
CVE-2026-23999US	medium5.5OT elevated	0.14% (3rd)	—	no fix	2026-02-26	≤ < 4.80.1
CVE-2026-27806US	—	0.11% (1st)	—	no fix	2026-04-08	≤ < 4.81.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-290Authentication Bypass by Spoofing4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-862Missing Authorization3 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-284Improper Access Control2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan