CVE-2026-103265 in Fleetالمعلومات

الملخص

بحسب MITRE • 01/10/2026

Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets hosts across multiple teams, exposing host UUIDs, command payloads, and device responses.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

VulnCheck

حجز

30/09/2026

إفشاء

01/10/2026

الاعتدال

تمت الموافقة

إدخال

VDB-412609

EPSS

0.00000

KEV

لا

النشاطات

منخفض جدًا

المصادر

Interested in the pricing of exploits?

See the underground prices here!