Skip to content
OpenAdvisories

Package · Go

github.com/fleetdm/fleet

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-23518

    Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment

    Fleet is open source device management software. In versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, a vulnerability in Fleet's Windows MDM enrollment flow could allow an attacker to submit forged authentication tokens that are not properly valid…

    fleetdm fleet github.com/fleetdm/fleet/v4 github.com/fleetdm/fleet Go