hackshelf

All tools / Incident response

Fleetdm

Open fleetdm/fleet on GitHub

Repository description, written by its ownerOpen device management

Active last commit today

135156191245166238209228565618817017324224422027733825731428820725325316030122127027623622629324622425418225022120923925319322915522925522421717930316754

Commits in 52 of the last 52 weeks

Category
Incident response
Subcategory
All-In-One Tools
License
Other (GitHub could not identify it)
Latest release
Release fleet-v4.93.0, Oct 8, 2026 (checksum file only, no signature)
Stars
7K
GitHub repository id
309820286
Listed in
awesome-incident-response (Apache-2.0)
Last checked
Oct 19, 2026

Security advisories

Advisories the maintainers published on GitHub. Vulnerabilities reported only elsewhere, for example in the NVD, are not included.

  • GHSA-x467-vgxf-2g6h High Oct 2, 2026
    Unauthenticated denial of service via unbounded recursion in Apple MDM enrollment property list parsing
  • GHSA-3982-g48v-9rwh High Oct 2, 2026
    Unbounded gzip decompression of request bodies allows unauthenticated denial of service
  • GHSA-vrc8-2wcx-327f Critical Sep 15, 2026
    Unauthenticated iOS/iPadOS device API access via non-secret host identifiers
  • GHSA-97fg-h5wh-2399 Medium Sep 14, 2026
    Team-scoped users can read MDM command results for hosts on other teams via shared command UUID
  • GHSA-fv3p-h7wv-2jgm High Sep 11, 2026
    OS command injection via Homebrew cask metadata in Fleet-maintained app install and uninstall scripts
  • GHSA-7q96-f8xw-jv5j CVE-2026-54245 Critical Aug 11, 2026
    SQL injection in Okta conditional access policy evaluation allows an enrolled host to compromise the Fleet database
  • GHSA-88p2-jj8w-j8qg CVE-2026-48786 Medium Aug 11, 2026
    Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint
  • GHSA-rxhg-vcww-2mpw Low Aug 11, 2026
    ORDER BY column injection on activity list endpoints
  • GHSA-q9c5-pp7m-fm2g Medium Aug 11, 2026
    Unauthenticated download of in-house iOS app binaries via predictable URLs
  • GHSA-gm7f-v959-fr2g CVE-2026-41262 Medium Jun 26, 2026
    Cross-Team Policy Data Exposure via Global Policy Read Endpoint
  • GHSA-x4qr-qw6h-wvxq CVE-2026-46371 Medium Jun 11, 2026
    Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint
  • GHSA-vxm7-9x8v-8gm4 CVE-2026-46370 Medium Jun 11, 2026
    Observer-level enrollment secret extraction via ORDER BY oracle on labels host-listing endpoint
  • GHSA-mxmp-wr3w-rvqx CVE-2026-46356 Medium May 13, 2026
    IP spoofing allows bypassing API rate limiting
  • GHSA-9vcr-g537-3w5v CVE-2026-26191 High May 13, 2026
    OS command injection in software packages
  • GHSA-x67p-9m2r-fxqv CVE-2026-26062 High May 13, 2026
    Fleet server may terminate unexpectedly when handling certain gRPC requests
  • GHSA-ffg9-j72f-j6xm CVE-2026-24899 High May 13, 2026
    Fleet Windows MDM Azure AD JWT authentication bypass
  • GHSA-j8h8-75h3-jg53 CVE-2026-24000 Medium May 13, 2026
    Rate limiting bypass via untrusted client IP headers
  • GHSA-2rc4-7jc6-qffh CVE-2026-23998 High May 13, 2026
    Windows MDM management endpoint authentication bypass
  • GHSA-rphv-h674-5hp2 CVE-2026-27806 High Apr 8, 2026
    Local Privilege Escalation via Tcl Command Injection in Orbit
  • GHSA-7rhw-5mpv-gp4h CVE-2026-34387 High Mar 27, 2026
    OS command injection via crafted software package metadata in uninstall scripts

Changes seen by hackshelf

  • Oct 19, 2026 First checked, status Active

Other tools in All-In-One Tools