tocsin

CVE-2026-22808

3 advisories.

Go/github.com/fleetdm/fleet CVE-2026-22808: medium

Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability

Action: Upgrade github.com/fleetdm/fleet to 4.75.2 or later.

go get github.com/fleetdm/fleet@v4.78.2
go get github.com/fleetdm/fleet@v4.77.1
go get github.com/fleetdm/fleet@v4.76.2
go get github.com/fleetdm/fleet@v4.75.2

Affected

introducedfixedlast affected
4.78.04.78.2-
4.77.04.77.1-
4.76.04.76.2-
4.75.04.75.2-

Fixed versions

4.78.24.77.14.76.24.75.2

Sources

CVE-2026-22808 · published · modified · JSON

Go/github.com/fleetdm/fleet/v4 CVE-2026-22808: medium

Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability

Action: Upgrade github.com/fleetdm/fleet/v4 to 4.43.5-0.20260111020427-0e6c790803d1 or later.

go get github.com/fleetdm/fleet/v4@v4.43.5-0.20260111020427-0e6c790803d1

Affected

introducedfixedlast affected
04.43.5-0.20260111020427-0e6c790803d1-

Fixed versions

4.43.5-0.20260111020427-0e6c790803d1

Sources

CVE-2026-22808 · published · modified · JSON

Go/github.com/fleetdm/fleet/v4 CVE-2026-22808: unknown

Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability in github.com/fleetdm/fleet

Action: Upgrade github.com/fleetdm/fleet/v4 to 4.75.2 or later.

go get github.com/fleetdm/fleet/v4@v4.75.2
go get github.com/fleetdm/fleet/v4@v4.76.2
go get github.com/fleetdm/fleet/v4@v4.77.1
go get github.com/fleetdm/fleet/v4@v4.78.2

Affected

introducedfixedlast affected
4.75.04.75.2-
4.76.04.76.2-
4.77.04.77.1-
4.78.04.78.2-

Fixed versions

4.75.24.76.24.77.14.78.2

Sources

CVE-2026-22808 · published · modified · JSON