CVE-2026-48786 | FleetDM Fleet up to 4.86.x Target Search Endpoint targets improper authorization

August 26, 2026 Yanac

A vulnerability categorized as critical has been discovered in FleetDM Fleet up to 4.86.x. Impacted is an unknown function of the file /api/latest/fleet/targets of the component Target Search Endpoint. The manipulation results in improper authorization.

This vulnerability was named CVE-2026-48786. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More