Vendor
Privasys
7 known vulnerabilities in products by Privasys, 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-108362 | Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack) | — | |
| Critical | CVE-2026-108269 | ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS session | — | |
| Critical | CVE-2026-108268 | enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS session | — | |
| Critical | CVE-2026-108267 | Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session | — | |
| Critical | CVE-2026-108266 | Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session | — | |
| Critical | CVE-2026-108265 | enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session | — | |
| High | CVE-2026-108361 | Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks | — |
Products
| Ra-tls-clients | 3 | 0 |