PT-2026-22114 · Fleet · Fleet

Secfox-Ai · Published 2026-02-26 · Updated 2026-03-25 · CVE-2026-23999

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.80.1

Description Fleet generates device lock and wipe PINs using a predictable algorithm based on the current Unix timestamp in affected versions. The PIN could potentially be derived if the approximate time the device was locked is known, as no secret key or additional entropy is used. An attacker with physical access to a locked device and knowledge of the approximate lock time could theoretically predict the correct PIN within a limited search window. Successful exploitation requires physical access to the device, knowledge of the approximate lock time, and is constrained by operating system rate limiting on PIN entry attempts. This issue does not allow remote exploitation or bypass of Fleet authentication controls.

Recommendations Versions prior to 4.80.1 should be updated to version 4.80.1 or later.

Exploit

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2026-23999

GHSA-PPWX-5JQ7-PX2W

GO-2026-4564

SUSE-SU-2026:1042-1

Affected Products

Fleet

References · 138

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23999.json · Exploit
• https://github.com/fleetdm/fleet/security/advisories/GHSA-ppwx-5jq7-px2w · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1042-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23999 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-4564 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23999 · Security Note
• https://osv.dev/vulnerability/GHSA-ppwx-5jq7-px2w · Vendor Advisory
• https://github.com/fleetdm/fleet · Note
• https://github.com/fleetdm/fleet/commit/05ca0693621e6671fb95dfc5437b9f9ee6dd7047 · Note
• https://suse.com/security/cve/CVE-2026-28683 · Note
• https://suse.com/security/cve/CVE-2026-27819 · Note
• https://suse.com/security/cve/CVE-2026-32319 · Note
• https://suse.com/security/cve/CVE-2026-29193 · Note
• https://suse.com/security/cve/CVE-2026-31961 · Note
• https://suse.com/security/cve/CVE-2026-30233 · Note