Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

edgelesssys — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting edgelesssys. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page catalogs vulnerabilities associated with the vendor edgelesssys, focusing on security weaknesses within their software products and services. It aggregates reports covering a range of vulnerability types, including but not limited to improper access control, injection flaws, and security misconfigurations, spanning from the earliest recorded incidents to the most recent disclosures. The time range covered includes all publicly known advisories and tracked security incidents reported for this specific vendor. By reviewing this data, users can effectively track edgelesssys’s security advisories to stay informed about patches and mitigation strategies. The page also helps users understand specific weakness classes by analyzing the nature and frequency of reported issues, providing context on the severity and impact of each vulnerability type. Additionally, it allows for the lookup of a product’s vulnerability history, enabling security professionals and developers to assess the long-term security posture of edgelesssys offerings. This resource is designed to support informed decision-making regarding risk management and compliance. It serves as a centralized reference point for understanding the historical context of security flaws in edgelesssys products. The information presented is derived from official vendor announcements, independent security research, and public databases. This aggregation aims to provide clarity and insight into the evolving threat landscape related to this vendor’s ecosystem. Users can rely on this data to prioritize remediation efforts and enhance their overall security strategy.

Top products by edgelesssys: contrast constellation
CVE ID Title CVSS Severity Published
CVE-2026-109359 Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery — contrast CWE-345 7.7 High 2026-10-12
CVE-2026-109358 Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation — contrast CWE-732 7.8 High 2026-10-12
CVE-2026-100837 Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching — contrast CWE-1289 3.7 Low 2026-09-27
CVE-2026-100836 Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer — contrast CWE-129 4.3 Medium 2026-09-27
CVE-2026-100839 Contrast before 1.18.0 AML Injection Remote Code Execution — contrast CWE-94 8.4 High 2026-09-27
CVE-2026-100838 Contrast before 1.19.1 CopyFile Policy Symlink Subversion — contrast CWE-59 8.1 High 2026-09-27
CVE-2026-100835 Contrast before 1.16.0 Remote Attestation Relay Attack — contrast CWE-295 7.4 High 2026-09-27
CVE-2026-100833 Contrast before 1.23.1 Image Substitution via Policy Generation — contrast CWE-20 9.6 Critical 2026-09-27
CVE-2025-71426 Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery — contrast CWE-285 7.1 High 2026-09-27
CVE-2025-71424 Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount — contrast CWE-693 3.5 Low 2026-09-27
CVE-2025-71425 Contrast before 1.8.1 Information Disclosure via Logging — contrast CWE-532 7.3 High 2026-09-27
CVE-2025-71423 Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure — contrast CWE-532 7.3 High 2026-09-27
CVE-2025-71422 Contrast before 1.12.1 Insecure LUKS2 Persistent Storage — contrast CWE-347 5.7 Medium 2026-09-27
CVE-2025-58356 Constellation allows insecure use of LUKS2 persistent storage partitions — constellation CWE-347 6.5AI Medium AI 2025-10-27

This page lists every published CVE security advisory associated with edgelesssys. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.