projectcontour

Products

ProductCVEsExploitedLatest
contour4–Aug 19, 2026

Exploited and recent CVEs

  • CVE-2026-50149 Medium 6.5 Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled 0.2%
  • CVE-2026-41246 High 8.1 Contour: Lua code injection via Cookie Path Rewrite Policy 0.5%
  • CVE-2021-32783 High 8.5 Authorization bypass in Contour 1.2%
  • CVE-2020-15127 High 7.5 Denial of service in Contour 1.4%