CVE-2026-46371 | fleetdm Fleet up to 4.84.1 Apple MDM Commands Listing Endpoint commands order_key information disclosure

August 26, 2026 Yanac

A vulnerability was found in fleetdm Fleet up to 4.84.1. It has been rated as problematic. The impacted element is an unknown function of the file /api/v1/fleet/mdm/apple/commands of the component Apple MDM Commands Listing Endpoint. This manipulation of the argument order_key causes information disclosure.

This vulnerability is handled as CVE-2026-46371. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More