Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injection vulnerability in Fleet's Apple MDM profile delivery pipeline could allow an attacker with a valid MDM enrollment certificate to exfiltrate or modify the contents of the Fleet database, including user credentials, API tokens, and device enrollment secrets. Version 4.81.0 patches the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-34385 Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injection vulnerability in Fleet's Apple MDM profile delivery pipeline could allo… https://www.cve.org/CVERecord?id=CVE-2026-34385
Post summary
The text announces a second‑order SQL injection vulnerability in Fleet’s Apple MDM profile delivery pipeline, affecting versions before 4.81.0.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-34385 - Fleet's Apple MDM profile delivery has second-order SQL injection that can compromise the database Intel Report: https://ift.tt/ub394n0
Post summary
The alert announces CVE-2026-34385, a second-order SQL injection in Fleet's Apple MDM profile delivery that could compromise the database.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fleetdm | fleet | - | - | - |