CVE-2026-100835
Contrast before 1.16.0 Remote Attestation Relay Attack
CVSS score
9.1
EPSS probability
%0.2
Risk score
0.0
Published
21 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
CVE-2026-100835 PoC: Edgeless Contrast <1.16.0 remote attestation relay (aTLS / CWE-295). Manifest audit (AllowedChipIDs/AllowedPIIDs), version & coordinator probe. https://pocbit.org/pocs/cve-2026-100835
Makefile Go / Python
Similar Vulnerabilities
8.6
CVE-2026-100833Contrast before 1.23.1 Image Substitution via Policy Generation
Patch status unknownEPSS %0
8.6
CVE-2026-100838Contrast before 1.19.1 CopyFile Policy Symlink Subversion
Patch status unknownEPSS %0
8.5
CVE-2025-71425Contrast before 1.8.1 Information Disclosure via Logging
Patch status unknownEPSS %0
8.4
CVE-2026-100839Contrast before 1.18.0 AML Injection Remote Code Execution
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-100835"