CVE-2026-8668EPSS p17.6%

CVE-2026-8668CVE-2026-8668

Description

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues.  Queue messages contained tenant-specific identifiers.  The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method entirely.

Scoring

EPSS0.27% probability of exploitation · percentile 17.6% · 2026-10-05T12:00:23Z
Last modified2026-06-18
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.