CVE-2026-80462 in Chef Automate

Sumário

de MITRE • 11/09/2026

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

Once again VulDB remains the best source for vulnerability data.

• Responsável: ProgressSoftware
• Reservar: 26/08/2026
• Divulgação: 11/09/2026
• Moderação: aceite
• Entrada: VDB-402427
• CPE: pronto
• CWE: CWE-269 (confirmado)
• CVSS: 10.0 (CNA)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo
• Sector: Agriculture, Transportation, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-80462
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80462
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-80462/