Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

contrast — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in contrast, with AI-generated Chinese analysis, references, and POCs.

Vendor: edgelesssys

CVE ID Title CVSS Severity Published
CVE-2026-100837 Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching CWE-1289 3.7 Low 2026-09-27
CVE-2026-100836 Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer CWE-129 4.3 Medium 2026-09-27
CVE-2026-100839 Contrast before 1.18.0 AML Injection Remote Code Execution CWE-94 8.4 High 2026-09-27
CVE-2026-100838 Contrast before 1.19.1 CopyFile Policy Symlink Subversion CWE-59 8.1 High 2026-09-27
CVE-2026-100835 Contrast before 1.16.0 Remote Attestation Relay Attack CWE-295 7.4 High 2026-09-27
CVE-2026-100833 Contrast before 1.23.1 Image Substitution via Policy Generation CWE-20 8.2 High 2026-09-27
CVE-2025-71426 Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery CWE-285 7.1 High 2026-09-27
CVE-2025-71424 Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount CWE-693 3.5 Low 2026-09-27
CVE-2025-71425 Contrast before 1.8.1 Information Disclosure via Logging CWE-532 7.3 High 2026-09-27
CVE-2025-71423 Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure CWE-532 7.3 High 2026-09-27
CVE-2025-71422 Contrast before 1.12.1 Insecure LUKS2 Persistent Storage CWE-347 5.7 Medium 2026-09-27

All 11 known CVE vulnerabilities affecting contrast with full Chinese analysis, references, and POCs where available.