CVE-2026-100835

CVE-2026-100835 — Contrast attestation relay aTLS Python 3 PoC for CVE-2026-100835 — Edgeless SystemsContrast before 1.16.0. Description PoCbit / GitHub CVE-2026-100835 — Remote attestation relay against Contrast attested TLS aTLS CWE-295. Before 1.16.0 , Contrast treated any cryptographically...

Exploit for CVE-2026-100835

CVE-2026-100835 — Contrast attestation relay aTLS Python 3...

CVE-2026-100835

Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...

CVE-2026-100835 Contrast before 1.16.0 Remote Attestation Relay Attack

Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...

CVE-2026-100835 Contrast before 1.16.0 Remote Attestation Relay Attack

Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...

EUVD-2026-87851

Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...

CVE-2026-100835

Contrast versions prior to 1.16.0 are vulnerable to a remote attestation relay attack . The root cause is that the software accepts any valid TEE attestation report containing the correct firmware patch levels and software measurements without binding the attestation to specific, physically trust...

CVE-2026-100835 Contrast before 1.16.0 Remote Attestation Relay Attack

Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...

Edgeless Systems Contrast Remote Attestation Relay

Edgeless Systems Contrast versions before 1.16.0 are susceptible to remote attestation relay attacks. The tool audits manifests for hardware allowlists, detects versions, and probes Coordinator endpoints...

PT-2026-99455

Name of the Vulnerable Software and Affected Versions Contrast versions prior to 1.16.0 Description The software is susceptible to remote attestation relay attacks. The system accepted any Trusted Execution Environment TEE attestation report that verified correctly and contained the expected...

CVE-2026-100835: Improper Certificate Validation

Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...