PT-2026-28629 · Fleet · Fleet

Fuzzztf · Publicado 2026-03-27 · Atualizado 2026-04-07 · CVE-2026-34388

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.81.0

Description Fleet, an open-source device management software, contains a flaw in its gRPC Launcher endpoint. An authenticated host can exploit this to cause a denial-of-service condition, leading to the termination of the entire Fleet server process. This disruption impacts all connected hosts, Mobile Device Management (MDM) enrollments, and API consumers by sending an unexpected log type value to the gRPC Launcher endpoint.

Recommendations Update to version 4.81.0 or later.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-703

Identificadores relacionados

CVE-2026-34388

GHSA-W254-4HP5-7CVV

GO-2026-4915

SUSE-SU-2026:1205-1

Produtos afetados

Fleet

Referências · 45

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34388.json · Exploit
• https://github.com/fleetdm/fleet · Nota
• https://github.com/fleetdm/fleet/security/advisories/GHSA-w254-4hp5-7cvv · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-w254-4hp5-7cvv · Aviso do Fabricante
• https://suse.com/support/update/announcement/2026/suse-su-20261205-1 · Nota
• https://suse.com/security/cve/CVE-2026-27018 · Nota
• https://suse.com/security/cve/CVE-2026-34389 · Nota
• https://suse.com/security/cve/CVE-2026-34388 · Nota
• https://suse.com/security/cve/CVE-2026-32241 · Nota
• https://suse.com/security/cve/CVE-2026-33634 · Nota
• https://suse.com/security/cve/CVE-2026-34040 · Nota
• https://suse.com/security/cve/CVE-2026-33747 · Nota
• https://suse.com/security/cve/CVE-2026-33186 · Nota
• https://suse.com/security/cve/CVE-2026-26233 · Nota
• https://suse.com/security/cve/CVE-2026-32695 · Nota