CVE-2025-71425
Contrast before 1.8.1 Information Disclosure via Logging
CVSS score
8.5
EPSS probability
%0.2
Risk score
0.0
Published
19 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.6
CVE-2026-100833
Contrast before 1.23.1 Image Substitution via Policy Generation
E
Patch status unknownEPSS %0
9.1
CVE-2026-100835
Contrast before 1.16.0 Remote Attestation Relay Attack
E
Patch status unknownEPSS %0
8.6
CVE-2026-100838
Contrast before 1.19.1 CopyFile Policy Symlink Subversion
E
Patch status unknownEPSS %0
8.5
CVE-2025-71423
Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure
E
Patch verifiedEPSS %0
6.3
CVE-2026-100837
Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching
E
Patch status unknownEPSS %0
8.4
CVE-2026-100839
Contrast before 1.18.0 AML Injection Remote Code Execution
E
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-71425"