CVE-2026-103264 | FleetDM Fleet up to 4.86.x Device API improper authentication

October 1, 2026 Yanac

A vulnerability described as critical has been identified in FleetDM Fleet up to 4.86.x. The impacted element is an unknown function of the component Device API. Executing a manipulation can lead to improper authentication.

This vulnerability is handled as CVE-2026-103264. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More