Skip to content
OpenAdvisories

Package · Go

github.com/fleetdm/fleet

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-23517

    Fleet has an Access Control vulnerability in debug/pprof endpoints

    Fleet is open source device management software. A broken access control issue in versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3 allowed authenticated users to access debug and profiling endpoints regardless of role. As a result, low-privilege u…

    fleetdm fleet github.com/fleetdm/fleet/v4 github.com/fleetdm/fleet Go
  • Medium 5.5
    CVE-2026-22808

    Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability

    fleetdm/fleet is open source device management software. Prior to versions 4.78.2, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, if Windows MDM is enabled, an unauthenticated attacker can exploit this XSS vulnerability to steal a Fleet administrator's authentication to…

    fleetdm fleet github.com/fleetdm/fleet/v4 github.com/fleetdm/fleet Go