Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Fleet — Vulnerabilities & Security Advisories 44

All 44 CVE vulnerabilities found in Fleet, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting the Fleet product line, specifically focusing on configuration flaws and access control issues tagged as critical. The collection encompasses publicly disclosed vulnerabilities reported between 2021 and the present, drawing data from vendor advisories and third-party research feeds. Users can utilize this resource to track the latest security advisories issued by the vendor, understand the prevalence and impact of specific weakness classes within fleet management systems, or review the historical vulnerability record for this product family. The data presented here is intended to assist security professionals in conducting risk assessments, prioritizing remediation efforts, and maintaining an up-to-date inventory of threats targeting fleet infrastructure. By centralizing these findings, the page offers a comprehensive view of the security posture without requiring users to navigate multiple disparate sources. All entries are organized chronologically and categorized by severity to facilitate efficient analysis and decision-making regarding system hardening and patch deployment strategies.

Vendor: Fleet

CVE ID Title CVSS Severity Published
CVE-2026-27465 Fleet: Sensitive Google Calendar credentials disclosed to low-privileged users CWE-201 4.3AI Medium AI 2026-02-26
CVE-2026-25963 Fleet: Authorization Bypass in certificate template batch deletion for team administrators CWE-863 3.8AI Low AI 2026-02-26
CVE-2026-23999 Fleet: Device lock PIN can be predicted if lock time is known CWE-330 5.7AI Medium AI 2026-02-26
CVE-2026-24004 Fleet: Unauthenticated Android device disenrollment vulnerability via Pub/Sub endpoint CWE-862 8.2AI High AI 2026-02-26
CVE-2026-26186 Fleet has a SQL injection via backtick escape in ORDER BY parameter CWE-89 8.1AI High AI 2026-02-26
CVE-2026-23518 Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment CWE-347 9.4AI Critical AI 2026-01-21
CVE-2026-23517 Fleet has an Access Control vulnerability in debug/pprof endpoints CWE-862 6.5AI Medium AI 2026-01-21
CVE-2026-22808 Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability CWE-79 8.8AI High AI 2026-01-21
CVE-2025-27509 SAML authentication vulnerability due to improper SAML response validation CWE-285 8.8 - 2025-03-06
CVE-2022-24841 Improper Authorization in github.com/fleetdm/fleet CWE-284 6.5 Medium 2022-04-18
CVE-2022-23600 Limited ability to spoof SAML authentication with missing audience verification CWE-287 5.3 Medium 2022-02-04
CVE-2021-21296 Denial-of-service in Fleet CWE-400 2.7 Low 2021-02-10
CVE-2020-26276 SAML authentication vulnerability in Fleet CWE-290 10.0 Critical 2020-12-17
CVE-2019-1020009 Fleet 信任管理问题漏洞 7.5 - 2019-07-29

All 44 known CVE vulnerabilities affecting Fleet with full Chinese analysis, references, and POCs where available.