Skip to content
Threat Feed
Subscribe

Tag

Attestation

4 briefs RSS
high advisory

CVE-2026-112377: Cryptographic Relay Vulnerability in attested-tls-poc

The attested-tls-poc library fails to bind attestation evidence to TLS connections, enabling attackers to relay valid evidence to impersonate workloads and intercept sensitive data.

PoC attested-tls-poc cryptographic-vulnerability tls-relay attestation
2t 1c
high advisory

Improper Seed Verification in Contrast Kubernetes Confidential-Computing Runtime

A vulnerability in the Contrast confidential-computing runtime allows attackers to impersonate a legitimate Coordinator by supplying a malicious seed during recovery, leading to the potential recovery of workload secrets.

PoC Contrast +1 kubernetes confidential-computing cve vulnerability attestation aTLS CVE-2026-100835
1t 2c updated
high advisory

Authentication Bypass in OpenNHP via Attestation Verification Manipulation

OpenNHP versions up to 1.0.2 contain an authentication bypass vulnerability allowing attackers to force the use of a fallback attestation verifier via malicious input.

OpenNHP authentication-bypass attestation security-flaw
1t 1c
high advisory

CVE-2025-47389 Memory Corruption Vulnerability in Attestation Report Generation

CVE-2025-47389 describes a memory corruption vulnerability stemming from a buffer copy operation failure due to an integer overflow during the attestation report generation process, potentially leading to arbitrary code execution.

cve-2025-47389 memory-corruption buffer-overflow attestation
2r 1t 1c