Advisories · Technology

Progress Software Chef Automate.

Every CVE that names Progress Software Chef Automate among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-80462 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Privilege Escalation in Progress Chef Automate
- Progress Software Chef Automate
- Authentication bypass
Not analysed yet 11 Sept 2026
CVE-2025-8868 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Chef Automate compliance service SQL Injection Vulnerability
- Progress Software Chef Automate
- SQL injection
- Information disclosure
Not analysed yet 29 Sept 2025
CVE-2025-6724 CVE record

CVSS 8.8 High

Chef Automate SQL Injection Vulnerability
- Progress Software Chef Automate
- SQL injection
Not analysed yet 29 Sept 2025