<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: fleet</title><description>Every new CVE for fleet.</description><link>https://agentprime.io/</link><item><title>CVE-2026-111924: Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression</title><link>https://agentprime.io/advisories/CVE-2026-111924/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111924/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 17 Oct 2026 18:46:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-111923: Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing</title><link>https://agentprime.io/advisories/CVE-2026-111923/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111923/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 17 Oct 2026 18:46:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103265: Fleet before 4.89.0 Information Disclosure via MDM Command Results</title><link>https://agentprime.io/advisories/CVE-2026-103265/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103265/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 10:42:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103264: Fleet before 4.87.0 Authentication Bypass via Device Identifiers</title><link>https://agentprime.io/advisories/CVE-2026-103264/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103264/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 10:42:06 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-101045: Fleet Homebrew Cask OS Command Injection via Metadata</title><link>https://agentprime.io/advisories/CVE-2026-101045/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101045/</guid><description>CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 27 Sep 2026 17:02:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34391: Fleet Vulnerable to Windows MDM cross-device command disclosure</title><link>https://agentprime.io/advisories/CVE-2026-34391/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34391/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 19:19:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34387: Fleet vulnerable to OS command injection via crafted software package metadata in uninstall scripts</title><link>https://agentprime.io/advisories/CVE-2026-34387/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34387/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 18:31:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-24841: Improper Authorization in github.com/fleetdm/fleet</title><link>https://agentprime.io/advisories/CVE-2022-24841/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-24841/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 18 Apr 2022 21:20:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-21296: Denial-of-service in Fleet</title><link>https://agentprime.io/advisories/CVE-2021-21296/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-21296/</guid><description>CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Feb 2021 20:00:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-1020009: Fleet before 2.1.2 allows exposure of SMTP credentials.</title><link>https://agentprime.io/advisories/CVE-2019-1020009/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-1020009/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Jul 2019 14:17:02 GMT</pubDate><category>CVE</category></item></channel></rss>