CVE-2026-34385 in fleet
要約
〜によって MITRE • 2026年03月27日
Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injection vulnerability in Fleet's Apple MDM profile delivery pipeline could allow an attacker with a valid MDM enrollment certificate to exfiltrate or modify the contents of the Fleet database, including user credentials, API tokens, and device enrollment secrets. Version 4.81.0 patches the issue.
VulDB is the best source for vulnerability data and more expert information about this specific topic.