E
Vendor security profile
edgelesssys
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs13
Critical1
CISA KEV0
Public exploit1
Patch rate%8
Avg. CVSS7.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
11
2
CVE KEV
CVE severity distribution
13toplam CVE
Critical1 (8%)
High8 (62%)
Medium4 (31%)
Patch and exploitation view
%8
Verified patch
%0
CISA KEV
%8
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
12Unknown
Latest vulnerabilities
8.7
CVE-2026-109359
Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery
E
Patch status unknownEPSS %0
8.5
CVE-2026-109358
Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation
E
Patch status unknownEPSS %0
6.3
CVE-2026-100837
Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching
E
Patch status unknownEPSS %0
5.3
CVE-2026-100836
Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer
E
Patch status unknownEPSS %0
8.4
CVE-2026-100839
Contrast before 1.18.0 AML Injection Remote Code Execution
E
Patch status unknownEPSS %0
8.6
CVE-2026-100838
Contrast before 1.19.1 CopyFile Policy Symlink Subversion
E
Patch status unknownEPSS %0
9.1
CVE-2026-100835
Contrast before 1.16.0 Remote Attestation Relay Attack
E
Patch status unknownEPSS %0
8.6
CVE-2026-100833
Contrast before 1.23.1 Image Substitution via Policy Generation
E
Patch status unknownEPSS %0
7.1
CVE-2025-71426
Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery
E
Patch status unknownEPSS %0
8.5
CVE-2025-71425
Contrast before 1.8.1 Information Disclosure via Logging
E
Patch status unknownEPSS %0