Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

edgelesssys vulnerabilities

15 published CVEs name edgelesssys among the affected products.

Published CVEs
15
Last 12 months
14
Critical
1
Known exploited
0

Critical 1High 9Medium 4Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20251
  2. 202614

Newest CVEs

  • CVE-2026-116197

    Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection

    edgelesssys · contrast

    Low2.1
  • CVE-2026-109359

    Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery

    edgelesssys · contrast

    High8.7
  • CVE-2026-109358

    Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation

    edgelesssys · contrast

    High8.5
  • CVE-2026-100837

    Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching

    edgelesssys · contrast

    Medium6.3
  • CVE-2026-100836

    Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer

    edgelesssys · contrast

    Medium5.3
  • CVE-2026-100839

    Contrast before 1.18.0 AML Injection Remote Code Execution

    edgelesssys · contrast

    High8.4
  • CVE-2026-100838

    Contrast before 1.19.1 CopyFile Policy Symlink Subversion

    edgelesssys · contrast

    High8.6
  • CVE-2026-100835

    Contrast before 1.16.0 Remote Attestation Relay Attack

    edgelesssys · contrast

    Critical9.1
  • CVE-2026-100833

    Contrast before 1.23.1 Image Substitution via Policy Generation

    edgelesssys · contrast

    High8.6
  • CVE-2025-71426

    Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery

    edgelesssys · contrast

    High7.1