Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/03/28 11:10 p.m.1 views

CVE-2026-34391

Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data such as WiFi credentials, VPN secrets...

8.7CVSS5.9AI score0.00027EPSS
Exploits0References1
Snyk
Snyk
added 2026/03/27 8:22 p.m.3 views

Exposure of Data Element to Wrong Session

Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session in the MDM command processing while handling SyncML status code. An attacker can obtain sensitive configuration data belonging to other devices such as WiFi credentials, VPN secrets, and...

8.7CVSS5.9AI score0.00027EPSS
Exploits0References2
Snyk
Snyk
added 2026/03/27 8:22 p.m.1 views

Exposure of Data Element to Wrong Session

Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session in the MDM command processing while handling SyncML status code. An attacker can obtain sensitive configuration data belonging to other devices such as WiFi credentials, VPN secrets, and...

8.7CVSS5.9AI score0.00027EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/27 7:19 p.m.2 views

CVE-2026-34391 Fleet Vulnerable to Windows MDM cross-device command disclosure

Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data such as WiFi credentials, VPN secrets...

8.7CVSS5.9AI score0.00027EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/27 7:19 p.m.0 views

EUVD-2026-16799

Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data such as WiFi credentials, VPN secrets...

8.7CVSS5.9AI score0.00027EPSS
Exploits0References1
CVE
CVE
added 2026/03/27 7:19 p.m.11 views

CVE-2026-34391

CVE-2026-34391 concerns Fleet, an open‑source device management platform. A flaw in Fleet’s Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data (e.g., WiFi credentials, VPN secrets, ...

8.7CVSS5.9AI score0.00027EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/27 7:19 p.m.1 views

CVE-2026-34391

Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data such as WiFi credentials, VPN secrets...

8.7CVSS5.9AI score0.00027EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2026/03/27 7:19 p.m.1 views

CVE-2026-34391 Fleet Vulnerable to Windows MDM cross-device command disclosure

Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data such as WiFi credentials, VPN secrets...

8.7CVSS5.9AI score0.00027EPSS
Exploits0References3
Rows per page
Query Builder