| CVE-2026-78587 |
Incorrect Authorization (CWE-863) in Fleet Server can lead to a denial of service of agent upload operations via…
|
3.1
Faible
|
2 sept. 2026 |
| CVE-2026-72657 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Fleet Server can lead to information disclosure via…
|
6.5
Moyenne
|
13 août 2026 |
| CVE-2026-72676 |
Improper Control of Generation of Code ('Code Injection') (CWE-94) in Fleet Server can lead to the execution of…
|
6.5
Moyenne
|
13 août 2026 |
| CVE-2026-56150 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via…
|
6.5
Moyenne
|
1 juil. 2026 |
| CVE-2024-52975 |
An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on…
|
9.0
Critique
|
23 janv. 2025 |
| CVE-2023-31421 |
It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify…
|
5.9
Moyenne
|
26 oct. 2023 |
| CVE-2023-46667 |
An issue was discovered in Fleet Server >= v8.10.0 and < v8.10.3 where Agent enrolment tokens are being inserted into…
|
8.1
Élevée
|
26 oct. 2023 |