Skip to content
OpenAdvisories

Vendor

edgelesssys

15 known vulnerabilities.

Products

contrast 14 constellation 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2026-100835 Public exploit

    Contrast before 1.16.0 Remote Attestation Relay Attack

    Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it…

    edgelesssys contrast
  • Critical 9.6
    CVE-2026-100833 Public exploit

    Contrast before 1.23.1 Image Substitution via Policy Generation

    Contrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an `allow_storage` rule that accepts storage en…

    edgelesssys contrast