CVE

CVE-2026-80462

10.0

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

chef automate

Updated Nov 6, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2026-80462 Scanner

CVE-2026-80462 Scanner - Unauthorized Admin Access vulnerability in Chef Automate

Used 7 times · 4.2k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: chef automate

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →