Login Request a demo
CO
Product
contrast
by edgelesssys · last CVE Oct 25, 2026
14
CVEs
0
On KEV
9.6
Max CVSS
3
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 1High 8Medium 2Low 3
Severity
All severities14Critical1High8Medium2Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add contrast to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-100833
9.6
0%
Sep 27
Contrast before 1.23.1 Image Substitution via Policy Generation
Affected: 1.14.0 before 1.23.1
CVE-2026-100839
8.4
0%
Sep 27
Contrast before 1.18.0 AML Injection Remote Code Execution
Affected: before 1.18.0
CVE-2026-100838
8.1
0%
Sep 27
Contrast before 1.19.1 CopyFile Policy Symlink Subversion
Affected: before 1.19.1
CVE-2026-109358
7.8
0%
Oct 12
Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation
Affected: 1.8.0 before 1.24.1
CVE-2026-109359
7.7
0%
Oct 12
Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery
Affected: 1.8.0 before 1.24.1
CVE-2026-100835
7.4
0%
Sep 27
Contrast before 1.16.0 Remote Attestation Relay Attack
Affected: before 1.16.0
CVE-2025-71425
7.3
0%
Sep 27
Contrast before 1.8.1 Information Disclosure via Logging
Affected: before 1.8.1
CVE-2025-71423
7.3
0%
Sep 27
Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure
Affected: 1.9.0 before 1.12.2
CVE-2025-71426
7.1
0%
Sep 27
Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery
Affected: before 1.4.1
CVE-2025-71422
5.7
0%
Sep 27
Contrast before 1.12.1 Insecure LUKS2 Persistent Storage
Affected: before 1.12.1
CVE-2026-100836
4.3
0%
Sep 27
Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer
Affected: through 1.20.0
CVE-2026-100837
3.7
0%
Sep 27
Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching
Affected: through 1.20.0
CVE-2025-71424
3.5
0%
Sep 27
Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount
Affected: before 1.9.1
CVE-2026-116197
New
2.6
0%
Oct 25
Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection
Affected: 1.21.0 before 1.25.0
Showing 14