# Suse Fleet vulnerabilities Source: https://junglewise.ai/threats/technologies/fleet Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/fleet.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 19 vulnerabilities in Suse Fleet: 0 in the last 7 days and 7 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-54245, was published on 26 August 2026. Nothing was published in the last eight weeks. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 7 - All time: 19 (3 critical, 0 exploited in the wild) ## About Suse Fleet Fleet is a GitOps controller for managing large-scale Kubernetes clusters. ## Latest Suse Fleet vulnerabilities - [CVE-2026-54245: Fleet SQL injection in Okta conditional access endpoint](https://junglewise.ai/threats/cve-2026-54245-fleet-sql-injection-in-okta-conditional-access-endpoint) (high, CVSS 4, published 26 Aug 2026) - [CVE-2026-46371: Fleet SQL injection in Apple MDM commands endpoint](https://junglewise.ai/threats/cve-2026-46371-fleet-sql-injection-in-apple-mdm-commands-endpoint) (medium, CVSS 6.5, published 26 Aug 2026) - [CVE-2026-46370: Fleet SQL injection in labels host-listing endpoint](https://junglewise.ai/threats/cve-2026-46370-fleet-sql-injection-in-labels-host-listing-endpoint) (medium, CVSS 6.5, published 26 Aug 2026) - [CVE-2026-48786: Fleet information disclosure in target search endpoint](https://junglewise.ai/threats/cve-2026-48786-fleet-information-disclosure-in-target-search-endpoint) (medium, CVSS 6.5, published 26 Aug 2026) - [CVE-2026-41262: Fleet DM cross-team policy data exposure in global policy endpoint](https://junglewise.ai/threats/cve-2026-41262-fleet-dm-cross-team-policy-data-exposure-in-global-policy) (medium, CVSS 4.3, published 26 Aug 2026) - [Fleet ORDER BY column injection in activity endpoints](https://junglewise.ai/threats/fleet-order-by-column-injection-in-activity-endpoints-40f0d0f7) (low, CVSS 3.1, published 20 Aug 2026) - [Fleet missing authorization in iOS app endpoints](https://junglewise.ai/threats/fleet-missing-authorization-in-ios-app-endpoints-32472906) (medium, CVSS 5.3, published 20 Aug 2026) - [CVE-2026-44938: SUSE Rancher Fleet Pod Security Standards bypass in agent-side deployer](https://junglewise.ai/threats/cve-2026-44938-suse-rancher-fleet-pod-security-standards-bypass-in-agent-side) (high, CVSS 8.8, published 7 Jul 2026) - [CVE-2026-44937: SUSE Rancher Fleet webhook request forgery via regex injection](https://junglewise.ai/threats/cve-2026-44937-suse-rancher-fleet-webhook-request-forgery-via-regex-injection) (high, CVSS 7.5, published 6 Jul 2026) - [CVE-2026-44936: SUSE Rancher Fleet credential leak via unvalidated Helm repository URL](https://junglewise.ai/threats/cve-2026-44936-suse-rancher-fleet-credential-leak-via-unvalidated-helm) (medium, CVSS 5, published 6 Jul 2026) - [CVE-2026-44935: SUSE Rancher Fleet improper validation in Helm Deployer](https://junglewise.ai/threats/cve-2026-44935-suse-rancher-fleet-improper-validation-in-helm-deployer) (critical, CVSS 9.9, published 2 Jul 2026) - [CVE-2026-44948: SUSE Rancher Fleet path traversal in ImageScan subsystem](https://junglewise.ai/threats/cve-2026-44948-suse-rancher-fleet-path-traversal-in-imagescan-subsystem) (info, CVSS 5.3, published 30 Jun 2026) - [CVE-2026-46356: Fleet Device Management rate limit bypass via IP spoofing](https://junglewise.ai/threats/cve-2026-46356-fleet-device-management-rate-limit-bypass-via-ip-spoofing) (high, CVSS 7.5, published 14 May 2026) - [CVE-2026-26191: Fleet Device Management OS command injection in software installer pipeline](https://junglewise.ai/threats/cve-2026-26191-fleet-device-management-os-command-injection-in-software) (critical, CVSS 9.8, published 14 May 2026) - [CVE-2026-26062: Fleet Device Management DoS in gRPC PublishLogs endpoint](https://junglewise.ai/threats/cve-2026-26062-fleet-device-management-dos-in-grpc-publishlogs-endpoint) (high, CVSS 6.5, published 14 May 2026) - [CVE-2026-24899: Fleet Windows MDM authentication bypass via Azure AD JWT spoofing](https://junglewise.ai/threats/cve-2026-24899-fleet-windows-mdm-authentication-bypass-via-azure-ad-jwt-spoofing) (high, CVSS 7.5, published 14 May 2026) - [CVE-2026-24000: Fleet Device Management rate limiting bypass via IP spoofing](https://junglewise.ai/threats/cve-2026-24000-fleet-device-management-rate-limiting-bypass-via-ip-spoofing) (medium, CVSS 5.3, published 14 May 2026) - [CVE-2026-23998: Fleet Device Management authentication bypass in Windows MDM endpoint](https://junglewise.ai/threats/cve-2026-23998-fleet-device-management-authentication-bypass-in-windows-mdm) (high, CVSS 7.5, published 14 May 2026) - [CVE-2026-41050: Rancher Fleet Helm impersonation bypass in RESTClientGetter](https://junglewise.ai/threats/cve-2026-41050-rancher-fleet-helm-impersonation-bypass-in-restclientgetter) (critical, CVSS 9.9, published 13 May 2026) ## Most severe Suse Fleet vulnerabilities - [CVE-2026-44935: SUSE Rancher Fleet improper validation in Helm Deployer](https://junglewise.ai/threats/cve-2026-44935-suse-rancher-fleet-improper-validation-in-helm-deployer) (critical, CVSS 9.9, published 2 Jul 2026) - [CVE-2026-41050: Rancher Fleet Helm impersonation bypass in RESTClientGetter](https://junglewise.ai/threats/cve-2026-41050-rancher-fleet-helm-impersonation-bypass-in-restclientgetter) (critical, CVSS 9.9, published 13 May 2026) - [CVE-2026-26191: Fleet Device Management OS command injection in software installer pipeline](https://junglewise.ai/threats/cve-2026-26191-fleet-device-management-os-command-injection-in-software) (critical, CVSS 9.8, published 14 May 2026) - [CVE-2026-44938: SUSE Rancher Fleet Pod Security Standards bypass in agent-side deployer](https://junglewise.ai/threats/cve-2026-44938-suse-rancher-fleet-pod-security-standards-bypass-in-agent-side) (high, CVSS 8.8, published 7 Jul 2026) - [CVE-2026-44937: SUSE Rancher Fleet webhook request forgery via regex injection](https://junglewise.ai/threats/cve-2026-44937-suse-rancher-fleet-webhook-request-forgery-via-regex-injection) (high, CVSS 7.5, published 6 Jul 2026) - [CVE-2026-46356: Fleet Device Management rate limit bypass via IP spoofing](https://junglewise.ai/threats/cve-2026-46356-fleet-device-management-rate-limit-bypass-via-ip-spoofing) (high, CVSS 7.5, published 14 May 2026) - [CVE-2026-24899: Fleet Windows MDM authentication bypass via Azure AD JWT spoofing](https://junglewise.ai/threats/cve-2026-24899-fleet-windows-mdm-authentication-bypass-via-azure-ad-jwt-spoofing) (high, CVSS 7.5, published 14 May 2026) - [CVE-2026-23998: Fleet Device Management authentication bypass in Windows MDM endpoint](https://junglewise.ai/threats/cve-2026-23998-fleet-device-management-authentication-bypass-in-windows-mdm) (high, CVSS 7.5, published 14 May 2026) - [CVE-2026-26062: Fleet Device Management DoS in gRPC PublishLogs endpoint](https://junglewise.ai/threats/cve-2026-26062-fleet-device-management-dos-in-grpc-publishlogs-endpoint) (high, CVSS 6.5, published 14 May 2026) - [CVE-2026-54245: Fleet SQL injection in Okta conditional access endpoint](https://junglewise.ai/threats/cve-2026-54245-fleet-sql-injection-in-okta-conditional-access-endpoint) (high, CVSS 4, published 26 Aug 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 2 | 0 | 0 | | 24 Aug 2026 | 5 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Suse technologies - [Suse Rancher](https://junglewise.ai/threats/technologies/rancher): 16 vulnerabilities - [Suse NeuVector](https://junglewise.ai/threats/technologies/neuvector): 8 vulnerabilities - [Suse Rancher Manager](https://junglewise.ai/threats/technologies/rancher-manager): 8 vulnerabilities - [Suse Rancher Fleet](https://junglewise.ai/threats/technologies/rancher-fleet): 7 vulnerabilities - [Suse Linux Enterprise Server](https://junglewise.ai/threats/technologies/linux-enterprise-server): 5 vulnerabilities - [Suse Libzypp](https://junglewise.ai/threats/technologies/libzypp): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Suse Fleet vulnerabilities", https://junglewise.ai/threats/technologies/fleet, 9 November 2026.