c
chef
Security Risk Profile
69
/100
highSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 10, 2016 to present
10
Total CVEs
8
Critical+High
0
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
8.1
Base severity
Avg EPSS
7%
Exploit probability
Unpatched
3
Critical/High
Risk Level
69/100
high
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
4High
4Medium
1Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
1<5%
2Age Distribution
Common Weaknesses (CWE)
1
Infoleak
2
2
SQL Injection
2
3
Code Injection
2
4
Malicious File Upload
1
Most Affected Products
1. Chef Automate6
2. Chef Chef 3602
3. Chef InSpec2
4. Chef Chef Automate API gateway1
5. Chef Chef Automate identity validation path1
Recent Vulnerabilities
See more →CVE-2026-80462
CVSS 10.0critical
Privilege Escalation in Progress Chef Automate
Sep 11, 2026🔧 No Patch
CVE-2026-8668
CVSS 2.3EPSS 0%low
Hardcoded credentials in embedded content
Jun 18, 2026🔧 No Patch
CVE-2026-8100
CVSS 8.6high
Jun 18, 2026🔧 No Patch
CVE-2025-8868
CVSS 9.8EPSS 20%critical
Chef Automate compliance service SQL Injection Vulnerability
Sep 29, 2025
CVE-2025-6724
CVSS 8.8high
Chef Automate SQL Injection Vulnerability
Sep 29, 2025
CVE-2024-9825
CVSS 5.4EPSS 0%medium
The Chef Habitat builder is impacted by Indirect Object reference(IDOR) by deletion of personal access token
Oct 28, 2024🔧 No Patch
CVE-2023-42658
CVSS 8.8high
InSpec Archive Command Vulnerable to Maliciously Crafted Profile
Oct 31, 2023
CVE-2023-40050
CVSS 9.9critical
Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance Application
Oct 31, 2023
CVE-2015-8559
CVSS 7.5high
Sep 21, 2017
CVE-2016-4326
CVSS 9.8critical
Jun 10, 2016🔧 No Patch
Monitor chef in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.