CVE-2026-8046210.0CriticalCWE-306
Privilege Escalation in Progress Chef Automate
Progress Software · Chef Automate
Not in CISA KEVVendor fix available
2.0%probability of exploitation in the next 30 days
80th percentile
050100
Higher than 80% of scored CVEs
10.0CriticalCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 12 Sep.
- Critical Chef Automate Flaw Lets Attackers Seize Infrastructure ControlSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.