Product by Edgelesssys
Contrast
14 known vulnerabilities in Contrast (Edgelesssys), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-100833 | Contrast before 1.23.1 Image Substitution via Policy Generation | 9.6 | |
| Critical | CVE-2026-100835 | Contrast before 1.16.0 Remote Attestation Relay Attack | 7.4 | |
| High | CVE-2026-100838 | Contrast before 1.19.1 CopyFile Policy Symlink Subversion | 8.1 | |
| High | CVE-2026-109359 | Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery | 7.7 | |
| High | CVE-2025-71423 | Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure | 7.3 | |
| High | CVE-2026-109358 | Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation | 7.8 | |
| High | CVE-2025-71425 | Contrast before 1.8.1 Information Disclosure via Logging | 7.3 | |
| High | CVE-2026-100839 | Contrast before 1.18.0 AML Injection Remote Code Execution | 8.4 | |
| High | CVE-2025-71426 | Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery | 7.1 | |
| Medium | CVE-2025-71422 | Contrast before 1.12.1 Insecure LUKS2 Persistent Storage | 5.7 | |
| Medium | CVE-2026-100837 | Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching | 3.7 | |
| Medium | CVE-2026-100836 | Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer | 4.3 | |
| Medium | CVE-2025-71424 | Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount | 3.5 | |
| Low | CVE-2026-116197 | Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection | 2.6 |