PT-2026-22116 · Fleet · Fleet

Secfox-Ai · Published 2026-02-26 · Updated 2026-03-25 · CVE-2026-25963

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.80.1

Description Fleet’s certificate template deletion API had a broken authorization check. This allowed a team administrator to delete certificate templates belonging to other teams within the same Fleet instance. The issue stemmed from a validation flaw in the batch deletion endpoint, where the system used a user-supplied team identifier without verifying if the certificate template IDs being deleted actually belonged to that team. This could disrupt certificate-based workflows, including device enrollment, Wi-Fi authentication, VPN access, and other certificate-dependent configurations. The impact is limited to the integrity and availability of certificate templates across teams.

Recommendations Upgrade to Fleet version 4.80.1 or later. Restrict access to certificate template management to trusted users. Avoid delegating team administrator permissions where not strictly required.

Exploit

Fix

LPE

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-25963

GHSA-5JVP-M9H4-253H

GO-2026-4561

SUSE-SU-2026:1042-1

Affected Products

Fleet

References · 142

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25963.json · Exploit
• https://github.com/fleetdm/fleet/security/advisories/GHSA-5jvp-m9h4-253h · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1042-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5jvp-m9h4-253h · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-4561 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25963 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25963 · Security Note
• https://github.com/fleetdm/fleet · Note
• https://github.com/fleetdm/fleet/commit/d27d0362db390fe835e3b5328525f25018df0fb7 · Note
• https://suse.com/security/cve/CVE-2026-30933 · Note
• https://suse.com/security/cve/CVE-2026-28790 · Note
• https://suse.com/security/cve/CVE-2026-28268 · Note
• https://suse.com/security/cve/CVE-2026-27944 · Note
• https://suse.com/security/cve/CVE-2026-28683 · Note
• https://suse.com/security/cve/CVE-2026-27819 · Note