Vulnerabilities in Privasys
7 resultsCVE-2026-108362CRITICALPrivasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)EPSS 0.2%CVE-2026-108268CRITICALenclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS sessionEPSS 0.1%CVE-2026-108269CRITICALra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS sessionEPSS 0.1%CVE-2026-108267CRITICALPrivasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS sessionEPSS 0.1%CVE-2026-108265CRITICALenclave-os-mini: RA-TLS challenge certificates were not bound to the TLS sessionEPSS 0.1%CVE-2026-108266CRITICALPrivasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS sessionEPSS 0.1%CVE-2026-108361HIGHPrivasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU AttacksEPSS 0.1%