E
Vendor security profile
edgelesssys
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical1
CISA KEV0
Public exploit1
Patch rate%9
Avg. CVSS7.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
11
0
CVE KEV
CVE severity distribution
11toplam CVE
Critical1 (9%)
High6 (55%)
Medium4 (36%)
Patch and exploitation view
%9
Verified patch
%0
CISA KEV
%9
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
10Unknown
Latest vulnerabilities
6.3
CVE-2026-100837
Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching
E
Patch status unknownEPSS %0
5.3
CVE-2026-100836
Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer
E
Patch status unknownEPSS %0
8.4
CVE-2026-100839
Contrast before 1.18.0 AML Injection Remote Code Execution
E
Patch status unknownEPSS %0
8.6
CVE-2026-100838
Contrast before 1.19.1 CopyFile Policy Symlink Subversion
E
Patch status unknownEPSS %0
9.1
CVE-2026-100835
Contrast before 1.16.0 Remote Attestation Relay Attack
E
Patch status unknownEPSS %0
8.6
CVE-2026-100833
Contrast before 1.23.1 Image Substitution via Policy Generation
E
Patch status unknownEPSS %0
7.1
CVE-2025-71426
Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery
E
Patch status unknownEPSS %0
8.5
CVE-2025-71425
Contrast before 1.8.1 Information Disclosure via Logging
E
Patch status unknownEPSS %0
5.1
CVE-2025-71424
Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount
E
Patch status unknownEPSS %0
8.5
CVE-2025-71423
Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure
E
Patch verifiedEPSS %0