EUVD-2026-87978

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

CVE-2026-101047

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

PT-2026-99565

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.87.0 Description In the enterprise tier, two endpoints serving in-house iOS application packages and manifests lack the intended random, time-limited URL token protection. Since Apple's InstallEnterpriseApplication MD...