Skip to content
Threat Feed
Subscribe

Vendor

Contrast

2 briefs RSS
high advisory

CVE-2026-100839: AML Injection Vulnerability in Contrast Runtime

Contrast versions before 1.18.0 are vulnerable to an AML injection attack (BadAML), allowing a malicious host to execute arbitrary code within the guest kernel on AMD SEV-SNP confidential computing platforms.

Metal-QEMU-SNP +1 confidential-computing kernel vulnerability virtualization
1t 1c
high advisory

Improper Seed Verification in Contrast Kubernetes Confidential-Computing Runtime

A vulnerability in the Contrast confidential-computing runtime allows attackers to impersonate a legitimate Coordinator by supplying a malicious seed during recovery, leading to the potential recovery of workload secrets.

Contrast +1 kubernetes confidential-computing cve vulnerability attestation aTLS CVE-2026-100835
1t 1c