Edgelesssys vulnerabilities

Products

• Contrast 14

Newest

• edgelesssys contrast Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection CVE-2026-116197 2.1 LowOctober 25, 2026
• edgelesssys contrast Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery CVE-2026-109359 8.7 HighOctober 12, 2026
• edgelesssys contrast Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation CVE-2026-109358 8.5 HighOctober 12, 2026
• edgelesssys contrast Contrast before 1.16.0 Remote Attestation Relay Attack CVE-2026-100835 Public exploit 9.1 CriticalSeptember 27, 2026
• edgelesssys contrast Contrast before 1.23.1 Image Substitution via Policy Generation CVE-2026-100833 Public exploit 8.6 HighSeptember 27, 2026
• edgelesssys contrast Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer CVE-2026-100836 Fix available 5.3 MediumJuly 1, 2026
• edgelesssys contrast Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching CVE-2026-100837 Fix available 6.3 MediumJuly 1, 2026
• edgelesssys contrast Contrast before 1.19.1 CopyFile Policy Symlink Subversion CVE-2026-100838 Fix available 8.6 HighApril 30, 2026
• edgelesssys contrast Contrast before 1.18.0 AML Injection Remote Code Execution CVE-2026-100839 Fix available 8.4 HighMarch 26, 2026
• edgelesssys contrast Contrast before 1.12.1 Insecure LUKS2 Persistent Storage CVE-2025-71422 Fix available 6.9 MediumOctober 28, 2025
• edgelesssys constellation Constellation allows insecure use of LUKS2 persistent storage partitions CVE-2025-58356 Fix available 8.3 HighOctober 27, 2025
• edgelesssys contrast Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure CVE-2025-71423 Fix available 8.5 HighAugust 28, 2025
• edgelesssys contrast Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount CVE-2025-71424 Fix available 5.1 MediumJuly 9, 2025
• edgelesssys contrast Contrast before 1.8.1 Information Disclosure via Logging CVE-2025-71425 Fix available 8.5 HighMay 28, 2025
• edgelesssys contrast Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery CVE-2025-71426 Fix available 7.1 HighFebruary 5, 2025