Fleetdm
fleetdm/fleet reposunu GitHub'da aç
Repo açıklaması, sahibi tarafından yazılmıştırOpen device management
Aktif son commit bugün
Son 52 haftanın 52 haftasında commit var
- Son sürümde checksum dosyası var, imza yok
- Kategori
- Olay müdahalesi
- Alt kategori
- All-In-One Tools
- Lisans
- Diğer (GitHub tanıyamadı)
- Son sürüm
- Sürüm fleet-v4.93.0, 8 Eki 2026 (yalnızca checksum dosyası, imza yok)
- Yıldız
- 7 B
- GitHub repo kimliği
- 309820286
- Kaynak liste
- awesome-incident-response (Apache-2.0)
- Son kontrol
- 19 Eki 2026
Güvenlik duyuruları
Geliştiricilerin GitHub'da yayınladığı duyurular. Yalnızca başka yerde, örneğin NVD'de bildirilen açıklar dahil değil.
- GHSA-x467-vgxf-2g6h Yüksek 2 Eki 2026
Unauthenticated denial of service via unbounded recursion in Apple MDM enrollment property list parsing - GHSA-3982-g48v-9rwh Yüksek 2 Eki 2026
Unbounded gzip decompression of request bodies allows unauthenticated denial of service - GHSA-vrc8-2wcx-327f Kritik 15 Eyl 2026
Unauthenticated iOS/iPadOS device API access via non-secret host identifiers - GHSA-97fg-h5wh-2399 Orta 14 Eyl 2026
Team-scoped users can read MDM command results for hosts on other teams via shared command UUID - GHSA-fv3p-h7wv-2jgm Yüksek 11 Eyl 2026
OS command injection via Homebrew cask metadata in Fleet-maintained app install and uninstall scripts - GHSA-7q96-f8xw-jv5j CVE-2026-54245 Kritik 11 Ağu 2026
SQL injection in Okta conditional access policy evaluation allows an enrolled host to compromise the Fleet database - GHSA-88p2-jj8w-j8qg CVE-2026-48786 Orta 11 Ağu 2026
Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint - GHSA-rxhg-vcww-2mpw Düşük 11 Ağu 2026
ORDER BY column injection on activity list endpoints - GHSA-q9c5-pp7m-fm2g Orta 11 Ağu 2026
Unauthenticated download of in-house iOS app binaries via predictable URLs - GHSA-gm7f-v959-fr2g CVE-2026-41262 Orta 26 Haz 2026
Cross-Team Policy Data Exposure via Global Policy Read Endpoint - GHSA-x4qr-qw6h-wvxq CVE-2026-46371 Orta 11 Haz 2026
Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint - GHSA-vxm7-9x8v-8gm4 CVE-2026-46370 Orta 11 Haz 2026
Observer-level enrollment secret extraction via ORDER BY oracle on labels host-listing endpoint - GHSA-mxmp-wr3w-rvqx CVE-2026-46356 Orta 13 May 2026
IP spoofing allows bypassing API rate limiting - GHSA-9vcr-g537-3w5v CVE-2026-26191 Yüksek 13 May 2026
OS command injection in software packages - GHSA-x67p-9m2r-fxqv CVE-2026-26062 Yüksek 13 May 2026
Fleet server may terminate unexpectedly when handling certain gRPC requests - GHSA-ffg9-j72f-j6xm CVE-2026-24899 Yüksek 13 May 2026
Fleet Windows MDM Azure AD JWT authentication bypass - GHSA-j8h8-75h3-jg53 CVE-2026-24000 Orta 13 May 2026
Rate limiting bypass via untrusted client IP headers - GHSA-2rc4-7jc6-qffh CVE-2026-23998 Yüksek 13 May 2026
Windows MDM management endpoint authentication bypass - GHSA-rphv-h674-5hp2 CVE-2026-27806 Yüksek 8 Nis 2026
Local Privilege Escalation via Tcl Command Injection in Orbit - GHSA-7rhw-5mpv-gp4h CVE-2026-34387 Yüksek 27 Mar 2026
OS command injection via crafted software package metadata in uninstall scripts
hackshelf'in gördüğü değişiklikler
- 19 Eki 2026 İlk kontrol, durum Aktif