fleetdm kayıtları
fleetdm üreticisine ait 28 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %89,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-290 Authentication Bypass by Spoofing4
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-862 Missing Authorization3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-287 Improper Authentication2
- CWE-330 Use of Insufficiently Random Values1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
28 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-26276İstismar yok | SAML authentication vulnerability in Fleetfleetdm · fleet · CWE-290 | Kritik9,8 | — | %2,2 | 17 Ara 2020 |
37İzleyin | CVE-2026-23518İstismar yok | Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollmentfleetdm · fleet · CWE-347 | Kritik9,3 | — | %0,3 | 21 Oca 2026 |
34İzleyin | CVE-2026-26062İstismar yok | Fleet server may terminate unexpectedly when handling certain gRPC requestsfleetdm · fleet · CWE-20 | Yüksek8,7 | — | %0,5 | 14 May 2026 |
34İzleyin | CVE-2026-26061İstismar yok | Fleet's unbounded request body read allows remote Denial of Servicefleetdm · fleet · CWE-770 | Yüksek8,7 | — | %0,5 | 27 Mar 2026 |
32İzleyin | CVE-2022-24841İstismar yok | Improper Authorization in github.com/fleetdm/fleetfleetdm · fleet · CWE-284 | Yüksek8,1 | — | %0,8 | 18 Nis 2022 |
32İzleyin | CVE-2026-24899İstismar yok | Fleet Windows MDM Azure AD JWT Authentication Bypassfleetdm · fleet · CWE-290 | Yüksek8,2 | — | %0,4 | 14 May 2026 |
32İzleyin | CVE-2026-23998İstismar yok | Fleet has a Windows MDM management endpoint authentication bypassfleetdm · fleet · CWE-295 | Yüksek8,2 | — | %0,2 | 14 May 2026 |
31İzleyin | CVE-2026-27806İstismar yok | Fleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbitfleetdm · fleet · CWE-78 | Yüksek7,8 | — | %0,1 | 8 Nis 2026 |
27İzleyin | CVE-2026-24000İstismar yok | Fleet has a rate limiting bypass via untrusted client IP headersfleetdm · fleet · CWE-290 | Orta6,9 | — | %0,4 | 14 May 2026 |
27İzleyin | CVE-2026-46356İstismar yok | Fleet: IP spoofing allows bypassing API rate limitingfleetdm · fleet · CWE-290 | Orta6,9 | — | %0,4 | 14 May 2026 |
26İzleyin | CVE-2022-23600İstismar yok | Limited ability to spoof SAML authentication with missing audience verificationfleetdm · fleet · CWE-287 | Orta6,5 | — | %0,9 | 4 Şub 2022 |
26İzleyin | CVE-2026-34388İstismar yok | Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpointfleetdm · fleet · CWE-703 | Orta6,6 | — | %0,5 | 27 Mar 2026 |
26İzleyin | CVE-2026-34391İstismar yok | Fleet Vulnerable to Windows MDM cross-device command disclosurefleetdm · fleet · CWE-488 | Orta6,6 | — | %0,3 | 27 Mar 2026 |
25İzleyin | CVE-2026-34386İstismar yok | Fleet vulnerable to SQL injection in MDM bootstrap package by authenticated team or global adminfleetdm · fleet · CWE-89 | Orta6,3 | — | %0,4 | 27 Mar 2026 |
25İzleyin | CVE-2026-23517İstismar yok | Fleet has an Access Control vulnerability in debug/pprof endpointsfleetdm · fleet · CWE-862 | Orta6,3 | — | %0,3 | 21 Oca 2026 |
24İzleyin | CVE-2026-26191İstismar yok | Fleet vulnerable to OS command injection in software packagesfleetdm · fleet · CWE-78 | Orta6,0 | — | %0,9 | 14 May 2026 |
24İzleyin | CVE-2026-26060İstismar yok | Fleet: Password reset tokens remain valid after password change for 24 hoursfleetdm · fleet · CWE-613 | Orta6,0 | — | %0,5 | 27 Mar 2026 |
24İzleyin | CVE-2026-34385İstismar yok | Fleet's Apple MDM profile delivery has second-order SQL injection that can compromise the databasefleetdm · fleet · CWE-89 | Orta6,2 | — | %0,3 | 27 Mar 2026 |
23İzleyin | CVE-2026-34387İstismar yok | Fleet vulnerable to OS command injection via crafted software package metadata in uninstall scriptsfleetdm · fleet · CWE-78 | Orta5,7 | — | %1,9 | 27 Mar 2026 |
22İzleyin | CVE-2026-22808İstismar yok | Fleet Windows MDM endpoint has a Cross-site Scripting vulnerabilityfleetdm · fleet · CWE-79 | Orta5,5 | — | %0,3 | 21 Oca 2026 |
20İzleyin | CVE-2026-26186İstismar yok | Fleet has a SQL injection via backtick escape in ORDER BY parameterfleetdm · fleet · CWE-89 | Orta5,1 | — | %0,6 | 25 Şub 2026 |
19İzleyin | CVE-2026-29180İstismar yok | Fleet's team maintainer can transfer hosts from any team via missing source team authorizationfleetdm · fleet · CWE-862 | Orta4,9 | — | %0,4 | 27 Mar 2026 |
19İzleyin | CVE-2026-34389İstismar yok | Fleet's user account creation via invite does not enforce invited email addressfleetdm · fleet · CWE-287 | Orta4,9 | — | %0,3 | 27 Mar 2026 |
11İzleyin | CVE-2021-21296İstismar yok | Denial-of-service in Fleetfleetdm · fleet · CWE-400 | Düşük2,7 | — | %1,9 | 10 Şub 2021 |
6İzleyin | CVE-2026-24004İstismar yok | Fleet: Unauthenticated Android device disenrollment vulnerability via Pub/Sub endpointfleetdm · fleet · CWE-862 | Düşük1,7 | — | %0,3 | 25 Şub 2026 |
- CVE-2020-2627640Planlayın
SAML authentication vulnerability in Fleet
KritikCVSS 9,8İstismar yokEPSS %2fleetdm · fleet17 Ara 2020
- CVE-2026-2351837İzleyin
Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment
KritikCVSS 9,3İstismar yokEPSS %0fleetdm · fleet21 Oca 2026
- CVE-2026-2606234İzleyin
Fleet server may terminate unexpectedly when handling certain gRPC requests
YüksekCVSS 8,7İstismar yokEPSS %1fleetdm · fleet14 May 2026
- CVE-2026-2606134İzleyin
Fleet's unbounded request body read allows remote Denial of Service
YüksekCVSS 8,7İstismar yokEPSS %0fleetdm · fleet27 Mar 2026
- CVE-2022-2484132İzleyin
Improper Authorization in github.com/fleetdm/fleet
YüksekCVSS 8,1İstismar yokEPSS %1fleetdm · fleet18 Nis 2022
- CVE-2026-2489932İzleyin
Fleet Windows MDM Azure AD JWT Authentication Bypass
YüksekCVSS 8,2İstismar yokEPSS %0fleetdm · fleet14 May 2026
- CVE-2026-2399832İzleyin
Fleet has a Windows MDM management endpoint authentication bypass
YüksekCVSS 8,2İstismar yokEPSS %0fleetdm · fleet14 May 2026
- CVE-2026-2780631İzleyin
Fleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbit
YüksekCVSS 7,8İstismar yokEPSS %0fleetdm · fleet8 Nis 2026
- CVE-2026-2400027İzleyin
Fleet has a rate limiting bypass via untrusted client IP headers
OrtaCVSS 6,9İstismar yokEPSS %0fleetdm · fleet14 May 2026
- CVE-2026-4635627İzleyin
Fleet: IP spoofing allows bypassing API rate limiting
OrtaCVSS 6,9İstismar yokEPSS %0fleetdm · fleet14 May 2026
- CVE-2022-2360026İzleyin
Limited ability to spoof SAML authentication with missing audience verification
OrtaCVSS 6,5İstismar yokEPSS %1fleetdm · fleet4 Şub 2022
- CVE-2026-3438826İzleyin
Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint
OrtaCVSS 6,6İstismar yokEPSS %0fleetdm · fleet27 Mar 2026
- CVE-2026-3439126İzleyin
Fleet Vulnerable to Windows MDM cross-device command disclosure
OrtaCVSS 6,6İstismar yokEPSS %0fleetdm · fleet27 Mar 2026
- CVE-2026-3438625İzleyin
Fleet vulnerable to SQL injection in MDM bootstrap package by authenticated team or global admin
OrtaCVSS 6,3İstismar yokEPSS %0fleetdm · fleet27 Mar 2026
- CVE-2026-2351725İzleyin
Fleet has an Access Control vulnerability in debug/pprof endpoints
OrtaCVSS 6,3İstismar yokEPSS %0fleetdm · fleet21 Oca 2026
- CVE-2026-2619124İzleyin
Fleet vulnerable to OS command injection in software packages
OrtaCVSS 6,0İstismar yokEPSS %1fleetdm · fleet14 May 2026
- CVE-2026-2606024İzleyin
Fleet: Password reset tokens remain valid after password change for 24 hours
OrtaCVSS 6,0İstismar yokEPSS %0fleetdm · fleet27 Mar 2026
- CVE-2026-3438524İzleyin
Fleet's Apple MDM profile delivery has second-order SQL injection that can compromise the database
OrtaCVSS 6,2İstismar yokEPSS %0fleetdm · fleet27 Mar 2026
- CVE-2026-3438723İzleyin
Fleet vulnerable to OS command injection via crafted software package metadata in uninstall scripts
OrtaCVSS 5,7İstismar yokEPSS %2fleetdm · fleet27 Mar 2026
- CVE-2026-2280822İzleyin
Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability
OrtaCVSS 5,5İstismar yokEPSS %0fleetdm · fleet21 Oca 2026
- CVE-2026-2618620İzleyin
Fleet has a SQL injection via backtick escape in ORDER BY parameter
OrtaCVSS 5,1İstismar yokEPSS %1fleetdm · fleet25 Şub 2026
- CVE-2026-2918019İzleyin
Fleet's team maintainer can transfer hosts from any team via missing source team authorization
OrtaCVSS 4,9İstismar yokEPSS %0fleetdm · fleet27 Mar 2026
- CVE-2026-3438919İzleyin
Fleet's user account creation via invite does not enforce invited email address
OrtaCVSS 4,9İstismar yokEPSS %0fleetdm · fleet27 Mar 2026
- CVE-2021-2129611İzleyin
Denial-of-service in Fleet
DüşükCVSS 2,7İstismar yokEPSS %2fleetdm · fleet10 Şub 2021
- CVE-2026-240046İzleyin
Fleet: Unauthenticated Android device disenrollment vulnerability via Pub/Sub endpoint
DüşükCVSS 1,7İstismar yokEPSS %0fleetdm · fleet25 Şub 2026