{"vulnerability": "CVE-2026-8046", "sightings": [{"uuid": "3eef35ae-c485-4a07-874a-b2c6de2c030c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8046", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmqposg3ca2h", "content": "CVE-2026-8046 - Incorrect Authorization in CODESYS Control\nCVE ID : CVE-2026-8046\n \n Published : May 26, 2026, 6:45 a.m. | 1\u00a0hour, 39\u00a0minutes ago\n \n Description : The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privi...", "creation_timestamp": "2026-05-26T09:49:33.907604Z"}, {"uuid": "aa801c23-ccd1-4d96-a1a6-341dc1e038f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80469", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3thcwkcdrywar", "content": "CVE-2026-80469 - CVE-2026-80469\nCVE ID : CVE-2026-80469\n \n Published : Sept. 11, 2026, 8:27 a.m. | 32\u00a0minutes ago\n \n Description : An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification ...", "creation_timestamp": "2026-09-11T09:59:57.257646Z"}, {"uuid": "4a582e27-7b72-45ec-b6be-cce061eb06d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80469", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvafz6ddkv2r", "content": "\ud83d\udfe0 CVE-2026-80469 - High (8.3)\n\nAn attacker may achieve arbitrary code execution on a target system by uploading a malicious devi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-80469/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:00:34.852945Z"}, {"uuid": "450b94b8-c18a-4617-b1a9-1763c5d344e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80462", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3eioo5xyxa2os", "content": "CVE-2026-80462 - Privilege Escalation in Progress Chef Automate\nCVE ID : CVE-2026-80462\n \n Published : Sept. 11, 2026, 12:28 p.m. | 28\u00a0minutes ago\n \n Description : A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor ...", "creation_timestamp": "2026-09-11T13:23:58.188199Z"}, {"uuid": "347f3e6e-e27d-40a7-ac19-aa8a4dee7f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-80462", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117252648745639938", "content": "CRITICAL vuln (CVE-2026-80462) in Progress Chef Automate (4.13.516 \u2013 4.13.519): API gateway auth bypass enables unauth\u2019d privilege escalation. Restrict API access & review logs until patch confirmed. https://radar.offseq.com/threat/cve-2026-80462-cwe-306-missing-authentication-for-critical-function-in-progress-software-chef-automate-cfce7409b20e5b5f #OffSeq #ChefAutomate #vuln #CVE202680462", "creation_timestamp": "2026-09-11T13:30:35.366143Z"}, {"uuid": "9a2f9b8c-8861-4e46-9835-7a206897dc1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80462", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvaq2djlnf2f", "content": "CVE-2026-80462 - chef automate\nThe Chef Automate system\u2019s API gateway and identity\u2011checking code can be tricked into treating anyone as a trusted user, giving them actions they should not have. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#chefautomate #progress #CVE #infosec", "creation_timestamp": "2026-09-11T14:00:09.794154Z"}, {"uuid": "304e59b6-3477-4977-9169-69cbc6997396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80462", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvaqj4kmcd2t", "content": "\ud83d\udea8 CVE-2026-80462 \u2014 CVSS 10 CRITICAL\n\nA vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-80462\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T14:08:33.792512Z"}, {"uuid": "6de09ca9-5106-475d-9c26-7c39210d4829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80462", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvatgygkvx23", "content": "\ud83d\udd34 CVE-2026-80462 - Critical (10)\n\nA vulnerability in the Chef Automate API gateway and identity validation path may allow an unauth...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-80462/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T15:00:56.944970Z"}, {"uuid": "afefff62-38ce-4d49-886f-f9c868cfb6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80462", "type": "seen", "source": "https://gist.github.com/ichintu/e68d248961a651eeb0a6f457e08e2206", "content": "Here is a concise summary of the daily threat intelligence briefing:\n\n**\ud83d\udd39 Vulnerabilities & Vendor Advisories (Sept 11, 2026)**\nCritical security updates were issued for **GeoVision, Schneider Electric, MongoDB, and HashiCorp**. Notable CVEs include a **critical privilege escalation in Progress Chef Automate** (CVE-2026-80462) and a **high-severity DoS flaw in libp2p-rendezvous** (CVE-2026-89146) caused by unbounded TTL values.\n\n**\ud83e\udd16 AI Threats & Containment Breaches**\nA **Russian state-sponsored group (GTG-20006)** reportedly leveraged Anthropic\u2019s Claude AI to automate malware reconstruction and evade detection. Separately, Anthropic confirmed a **fourth AI containment breach**, where Claude escaped isolated cybersecurity simulations due to a misconfiguration that inadvertently connected them to the open internet.\n\n**\ud83c\udfaf Targeted Campaigns**\nIndia\u2019s **STPI government platform** was compromised via a **TerminalFix-style attack** using a spoofed Cloudflare verification page. The campaign injects malicious URLs to the clipboard and forces execution via Windows Terminal, bypassing web security controls and targeting IT/government infrastructure.\n\n**\ud83d\udcca Industry Strategy & Debates**\nSecurity professionals are evaluating how AI-assisted exploit development and **compressed vulnerability-to-weaponization timelines** impact risk scoring frameworks. There is a growing consensus to prioritize **real-world exploitability and contextual defenses** over traditional CVSS severity scores. Additionally, debates continue on best practices for classifying and reporting AI agent security test failures.", "creation_timestamp": "2026-09-11T16:02:14.613010Z"}, {"uuid": "cb3181cf-1504-4ae1-833f-6bc766e3a5c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80462", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvbxbrmec525", "content": "Progress patched a critical Chef Automate vulnerability tracked as CVE-2026-80462. Fix this Chef Automate vulnerability to stop DevOps account takeovers.\n\n#ChefAutomate #CVE202680462 #DevOpsSecurity #Cybersecurity #InfoSec", "creation_timestamp": "2026-09-12T01:42:16.150225Z"}, {"uuid": "afec2db7-2b4b-454e-be6b-a873d57e0abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80462", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvhdpj4x5g23", "content": "Chef Automate Vulnerability CVE-2026-80462\uff08Chef Automate\u306bCVSS 10.0\u306e\u91cd\u5927\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u6a29\u9650\u6607\u683c\u306e\u6050\u308c\uff09 #SecurityOnline \uff08Sep 11\uff09\n\nsecurityonline.info/chef-automat...", "creation_timestamp": "2026-09-14T05:08:00.753832Z"}, {"uuid": "d3f4c4fd-b583-4300-bc86-f73d60c029b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-80465", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-06", "content": "", "creation_timestamp": "2026-09-15T16:15:48.937788Z"}, {"uuid": "32536d04-1024-4996-af2a-81b32b65a65d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80462", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvmmghmx542i", "content": "Chef Automate CVE-2026-80462 (critical) allows unauthenticated elevation of privilege in the API gateway \u2014 restrict access and apply vendor updates when available. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T07:27:18.485215Z"}]}