CVE-2026-8668— Hardcoded credentials in embedded content
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Progress Chef | Chef360 | < 1.7.1 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-8668
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Hardcoded credentials in embedded content
Source: NVD (National Vulnerability Database)
Vulnerability Description
A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method entirely.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
凭证传输未经安全保护
Source: NVD (National Vulnerability Database)
Vulnerability Title
Progress Chef Chef360 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Progress Chef Chef360是Progress Chef组织的一款基础设施自动化配置与合规管理平台。 Progress Chef Chef360 1.7.1之前版本存在加密问题漏洞，该漏洞源于嵌入静态凭据，可能导致未经身份验证的攻击者访问内部消息队列。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Progress Chef | Chef360 | 0 ~ 1.7.1 | - |
II. Public POCs for CVE-2026-8668
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-8668
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: Chef360
Same weakness: CWE-523
- CVE-2026-8673
Password re-initialization mechanism sends passwords in plai - CVE-2026-23635
Kiteworks Secure Data Forms has a potential Unprotected Tran - CVE-2025-64309
Brightpick Mission Control / Internal Logic Control Unprotec - CVE-2025-64308
Brightpick Mission Control / Internal Logic Control Unprotec - CVE-2025-41705
Phoenix Contact: WebSocket Message Interception Leaks Webfro
V. Comments for CVE-2026-8668
No comments yet