Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-100837 · Microsoft / collected KEV context

EUVD-2026-87832

GHSA-frqc-cxqj-qxmv

GHSA-6c87-g9pw-78fx

GO-2026-5865

cve-program · CVE-2026-100837

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-6c87-g9pw-78fx
• https://www.vulncheck.com/advisories/edgeless-systems-contrast-through-1.20.0-credential-leak-via-registry-suffix-matching

euvd · EUVD-2026-87832

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-6c87-g9pw-78fx
• https://www.vulncheck.com/advisories/edgeless-systems-contrast-through-1.20.0-credential-leak-via-registry-suffix-matching

nvd · CVE-2026-100837

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-6c87-g9pw-78fx
• https://www.vulncheck.com/advisories/edgeless-systems-contrast-through-1.20.0-credential-leak-via-registry-suffix-matching

osv · GHSA-6c87-g9pw-78fx

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-6c87-g9pw-78fx
• https://github.com/edgelesssys/contrast/commit/10826b1d82613025767fb094e8aa51a7dcfbd2a1
• https://github.com/edgelesssys/contrast
• https://github.com/edgelesssys/contrast/releases/tag/v1.21.0

osv · GO-2026-5865

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-6c87-g9pw-78fx
• https://github.com/edgelesssys/contrast/commit/10826b1d82613025767fb094e8aa51a7dcfbd2a1
• https://github.com/edgelesssys/contrast/releases/tag/v1.21.0

No related operational record is retained in the current change model.