CVE-2026-111923

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential...

CVE-2026-111923

Fleet versions prior to 4.89.0 are vulnerable to an unauthenticated Denial of Service (DoS) attack due to an unbounded recursion vulnerability in the Apple MDM enrollment property list parsing . An unauthenticated attacker can send a crafted binary plist payload (approximately 150 bytes) to the e...

CVE-2026-111923 Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential...

EUVD-2026-103291

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential...

PT-2026-116492

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential...