CVE-2026-111924 – Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression

​CVE ID :CVE-2026-111924

Published : Oct. 17, 2026, 6:46 p.m. | 18 minutes ago

Description :Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending gzip-compressed request bodies. Attackers can send small, highly compressed requests with Content-Encoding: gzip to unauthenticated endpoints that expand during decoding, crashing the entire Fleet instance.

Severity: 8.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More