Progress Chef

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Progress Chef records in CISA KEV

No Progress Chef vulnerabilities are listed in CISA KEV.

2 records

TI-2026-07137 CVE-2026-8100 · GHSA-36qg-x8h8-59g2

MEDIUM 40

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00549 Published 2026-06-18 Fixed in 1.7.1 CWE-23

TI-2026-07617 CVE-2026-8668 · GHSA-2q9w-rh4f-g84j

LOW 12

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00271 Published 2026-06-18 Fixed in 1.7.1 CWE-523