VULNERABILITY INTELLIGENCE
CVE-2026-8668
EPSS probability0.27%
CISA KEVNot currently listed
Published2026-06-18
Last modified2026-10-26
Description
A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method entirely.
Weakness classification
- security@progress.com: CWE-523