Resource exhaustion in Fleetdm Fleet

CVE-2026-26061

Fleet is open source device management software. Prior to 4.81.0, Fleet contained multiple unauthenticated HTTP endpoints that read request bodies without enforcing a size limit. An unauthenticated attacker could exploit this behavior by s…

EPSS: 0.000 (6.7th percentile) — read the EPSS interpretation.