Skip to content

Vendor

Progress Chef vulnerabilities

2 published CVES affecting Progress Chef, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
0
Low
1
Unscored
0
CISA KEV
0
Atom feed of Progress Chef alerts

Products

Latest Progress Chef CVEs

Newest publication first

  1. CVE-2026-8668 Hardcoded credentials in embedded content

    Published
    LowCVSS 2.3

    A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this...

  2. CVE-2026-8100 Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper handling of URL-encoded...

    Published
    HighCVSS 8.6

    Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper handling of URL-encoded paths during request processing. In certain scenarios, an authenticated request...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.