5 matches found
CVE-2026-101046
Fleet versions prior to 4.89.0 are vulnerable to an SQL injection in the activity list endpoints: GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/{id}/activities. The root cause is the deprecated cursor-pagination helper appendListOptionsWithCursorToSQL, which interpolates caller-supplie...
CVE-2026-101046 Fleet before 4.89.0 SQL Injection via ORDER BY Activity Endpoints
Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/id/activities. The deprecated cursor-pagination helper appendListOptionsWithCursorToSQL interpolated the caller-supplied sort/order key into the SQL...
CVE-2026-101046 Fleet before 4.89.0 SQL Injection via ORDER BY Activity Endpoints
Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/id/activities. The deprecated cursor-pagination helper appendListOptionsWithCursorToSQL interpolated the caller-supplied sort/order key into the SQL...
EUVD-2026-87977
Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/id/activities. The deprecated cursor-pagination helper appendListOptionsWithCursorToSQL interpolated the caller-supplied sort/order key into the SQL...
CVE-2026-101046 Fleet before 4.89.0 SQL Injection via ORDER BY Activity Endpoints
Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/id/activities. The deprecated cursor-pagination helper appendListOptionsWithCursorToSQL interpolated the caller-supplied sort/order key into the SQL...