[ Vendor · 13 CVEs ]
edgelesssys
CVEs affecting edgelesssys published in the last 30 days, plus any edgelesssys CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109358 | 12 Oct 2026 | CVSS 7.8 | edgelesssys contrastEdgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config… | |
| CVE-2026-109359 | 12 Oct 2026 | CVSS 7.7 | edgelesssys contrastContrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to confirm the serving peer uses… | |
| CVE-2026-100838 | 27 Sep 2026 | CVSS 8.1 | edgelesssys contrastContrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI… | |
| CVE-2026-100839 | 27 Sep 2026 | CVSS 8.4 | edgelesssys contrastContrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML… | |
| CVE-2026-100833 | 27 Sep 2026 | CVSS 9.6 | edgelesssys contrastContrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad… | |
| CVE-2026-100835 | 27 Sep 2026 | CVSS 7.4 | edgelesssys contrastContrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and… | |
| CVE-2026-100836 | 27 Sep 2026 | CVSS 4.3 | edgelesssys contrastContrast through 1.20.0 contains a panic vulnerability in the transit-engine endpoint's ciphertextContainer.UnmarshalJSON function that fails to… | |
| CVE-2026-100837 | 27 Sep 2026 | CVSS 3.7 | edgelesssys contrastContrast (Edgeless Systems) through 1.20.0 performs unanchored suffix matching when selecting per-registry configuration in the imagepuller… | |
| CVE-2025-71426 | 27 Sep 2026 | CVSS 7.1 | edgelesssys contrastContrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not verify the seed supplied by… | |
| CVE-2025-71424 | 27 Sep 2026 | CVSS 3.5 | edgelesssys contrastContrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0. The VOLUME… | |
| CVE-2025-71425 | 27 Sep 2026 | CVSS 7.3 | edgelesssys contrastContrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contrast initializer is configured… | |
| CVE-2025-71423 | 27 Sep 2026 | CVSS 7.3 | edgelesssys contrastEdgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initializer logs the full NewMeshCert… | |
| CVE-2025-71422 | 27 Sep 2026 | CVSS 5.7 | edgelesssys contrastContrast is a Kubernetes runtime for confidential containers. In versions before 1.12.1, the secure persistent volume feature is vulnerable to a… |