CVE-2026-34391 in fleetdm fleet
요약 (영어)
Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data such as WiFi credentials, VPN secrets, and certificate payloads across the entire Windows fleet. Version 4.81.1 patches the issue.
책임이 있는
GitHub_M
예약하다
2026. 03. 27.
공개
2026. 03. 27.
엔트리
| 아이디 | 취약성 | CWE | 기본 | 임시 | 0day | 오늘 | 악용 | KEV | EPSS | CTI | 대책 | CVE |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 354025 | fleetdm fleet 정보 공개 | 488 | 5.3 | 5.1 | $0-$5k | $0-$5k | 정의되지 않음 | 0.00024 | 0.00 | 공식 수정 | CVE-2026-34391 |