tocsin

CVE-2026-23517

3 advisories.

Go/github.com/fleetdm/fleet CVE-2026-23517: high, EPSS 0.29%

Fleet has an Access Control vulnerability in debug/pprof endpoints

Action: Upgrade github.com/fleetdm/fleet to 4.75.2 or later.

go get github.com/fleetdm/fleet@v4.78.3
go get github.com/fleetdm/fleet@v4.77.1
go get github.com/fleetdm/fleet@v4.76.2
go get github.com/fleetdm/fleet@v4.75.2

Affected

introducedfixedlast affected
4.78.04.78.3-
4.77.04.77.1-
4.76.04.76.2-
4.75.04.75.2-

Fixed versions

4.78.34.77.14.76.24.75.2

Sources

CVE-2026-23517 · published · modified · JSON

Go/github.com/fleetdm/fleet/v4 CVE-2026-23517: high, EPSS 0.29%

Fleet has an Access Control vulnerability in debug/pprof endpoints

Action: Upgrade github.com/fleetdm/fleet/v4 to 4.78.3-0.20260112221730-5c030e32a3a9 or later.

go get github.com/fleetdm/fleet/v4@v4.78.3-0.20260112221730-5c030e32a3a9

Affected

introducedfixedlast affected
04.78.3-0.20260112221730-5c030e32a3a9-

Fixed versions

4.78.3-0.20260112221730-5c030e32a3a9

Sources

CVE-2026-23517 · published · modified · JSON

Go/github.com/fleetdm/fleet/v4 CVE-2026-23517: unknown, EPSS 0.29%

Fleet has an Access Control vulnerability in debug/pprof endpoints in github.com/fleetdm/fleet

Action: Upgrade github.com/fleetdm/fleet/v4 to 4.75.2 or later.

go get github.com/fleetdm/fleet/v4@v4.75.2
go get github.com/fleetdm/fleet/v4@v4.76.2
go get github.com/fleetdm/fleet/v4@v4.77.1
go get github.com/fleetdm/fleet/v4@v4.78.3

Affected

introducedfixedlast affected
4.75.04.75.2-
4.76.04.76.2-
4.77.04.77.1-
4.78.04.78.3-

Fixed versions

4.75.24.76.24.77.14.78.3

Sources

CVE-2026-23517 · published · modified · JSON