Live › vulnerability › CVE-2026-111923
Go to dashboardFleet before 4.89.0 parses Apple MDM enrollment/check-in property lists with unbounded recursion. An unauthenticated attacker with network access can send a ~150-byte binary plist to the enrollment endpoints and crash the server through CPU and memory exhaustion. Availability only. Only instances with Apple MDM enabled are affected.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| fleet | go | < 4.89.0 | 4.89.0 |
4.89.0 is affected4.89.0 or later (4.92.0 also moves the fix into upstream micromdm/plist v0.3.0)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential allocation or infinite recursion that exhausts CPU and memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-111923")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.