CVE-2026-34391 in fleetdm fleet
要約 (英語)
Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data such as WiFi credentials, VPN secrets, and certificate payloads across the entire Windows fleet. Version 4.81.1 patches the issue.
責任者
GitHub_M
予約する
2026年03月27日
公開
2026年03月27日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 354025 | fleetdm fleet 情報漏えい | 488 | 未定義 | 公式な修正 | CVE-2026-34391 |