ED
Vendor
edgelesssys
14
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116197 New | CO contrast edgelesssys | 2.6 | Oct 25 | Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection |
| CVE-2026-109359 | CO contrast edgelesssys | 7.7 | Oct 12 | Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery |
| CVE-2026-109358 | CO contrast edgelesssys | 7.8 | Oct 12 | Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation |
| CVE-2026-100837 | CO contrast edgelesssys | 3.7 | Sep 27 | Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching |
| CVE-2026-100836 | CO contrast edgelesssys | 4.3 | Sep 27 | Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer |
| CVE-2026-100839 | CO contrast edgelesssys | 8.4 | Sep 27 | Contrast before 1.18.0 AML Injection Remote Code Execution |
| CVE-2026-100838 | CO contrast edgelesssys | 8.1 | Sep 27 | Contrast before 1.19.1 CopyFile Policy Symlink Subversion |
| CVE-2026-100835 | CO contrast edgelesssys | 7.4 | Sep 27 | Contrast before 1.16.0 Remote Attestation Relay Attack |
| CVE-2026-100833 | CO contrast edgelesssys | 9.6 | Sep 27 | Contrast before 1.23.1 Image Substitution via Policy Generation |
| CVE-2025-71426 | CO contrast edgelesssys | 7.1 | Sep 27 | Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery |
| CVE-2025-71425 | CO contrast edgelesssys | 7.3 | Sep 27 | Contrast before 1.8.1 Information Disclosure via Logging |
| CVE-2025-71424 | CO contrast edgelesssys | 3.5 | Sep 27 | Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount |
| CVE-2025-71423 | CO contrast edgelesssys | 7.3 | Sep 27 | Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure |
| CVE-2025-71422 | CO contrast edgelesssys | 5.7 | Sep 27 | Contrast before 1.12.1 Insecure LUKS2 Persistent Storage |