AppleFleet Device Management API Flaw Allows Host Impersonation and MDM Hijacking
ThreatsCloud & SaaSCVE-2026-103264Critical
An authentication bypass in Fleet device APIs allows unauthenticated remote attackers to impersonate enrolled Apple devices and trigger MDM actions.
CST Editorial Desk12 min read