CVE-2026-78587 in Fleet ServerИнформация

Сводка

по VulDB • 02.09.2026

Incorrect Authorization (CWE-863) in Fleet Server can lead to a denial of service of agent upload operations via Privilege Abuse (CAPEC-122). Fleet Server does not correctly verify session ownership during multi-part data upload operations, allowing any authenticated agent to interfere with the active upload sessions belonging to other enrolled agents.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Ответственный

Elastic

Резервировать

24.08.2026

Раскрытие

02.09.2026

Модерация

принято

Вход

VDB-398178

EPSS

0.00000

KEV

Нет

Деятельности

Низкий

Источники

Want to stay up to date on a daily basis?

Enable the mail alert feature now!