Known Vulnerabilities for Automate by Chef
Listed below are 3 of the newest known vulnerabilities associated with "Automate" by "Chef".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115480 json | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the public POST /baser/ap... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-111278 json | NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protectio... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-108903 json | pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attacker... | Not Provided | 2026-10-11 | 2026-10-13 |
| CVE-2026-104742 json | The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in a... | Not Provided | 2026-10-10 | 2026-10-11 |
| CVE-2026-104741 json | The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in a... | Not Provided | 2026-10-10 | 2026-10-11 |
| CVE-2026-80462 json | A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elev... | Not Provided | 2026-09-11 | 2026-09-18 |
| CVE-2026-77897 json | Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally. | Not Provided | 2026-09-08 | 2026-09-25 |
| CVE-2026-65818 json | Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network. | Not Provided | 2026-09-03 | 2026-09-08 |
| CVE-2026-61611 json | Lychee is a free, open-source photo-management tool. Prior to 7.6.1, POST /api/v2/Album::unlock has no throttle, attempt coun... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-30250 json | Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allo... | Not Provided | 2026-08-18 | 2026-08-18 |