Eedgelesssys

Products

Exploited and recent CVEs

• CVE-2026-116197 Low 2.6 Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection 0.2%
• CVE-2026-109359 High 7.7 Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery 0.1%
• CVE-2026-109358 High 7.8 Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation 0.1%
• CVE-2026-100837 Low 3.7 Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching 0.2%
• CVE-2026-100836 Medium 4.3 Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer 0.2%
• CVE-2026-100839 High 8.4 Contrast before 1.18.0 AML Injection Remote Code Execution 0.1%
• CVE-2026-100838 High 8.1 Contrast before 1.19.1 CopyFile Policy Symlink Subversion 0.2%
• CVE-2026-100835 High 7.4 Contrast before 1.16.0 Remote Attestation Relay Attack 0.3%
• CVE-2026-100833 Critical 9.6 Contrast before 1.23.1 Image Substitution via Policy Generation 0.2%
• CVE-2025-71426 High 7.1 Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery 0.1%
• CVE-2025-71425 High 7.3 Contrast before 1.8.1 Information Disclosure via Logging 0.2%
• CVE-2025-71424 Low 3.5 Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount 0.2%
• CVE-2025-71423 High 7.3 Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure 0.2%
• CVE-2025-71422 Medium 5.7 Contrast before 1.12.1 Insecure LUKS2 Persistent Storage <0.1%
• CVE-2025-58356 High 8.3 Constellation allows insecure use of LUKS2 persistent storage partitions 0.1%