Privasys has 7 CVEs on record. Disclosure cadence is accelerating: 7 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 7. The median CVSS is 9.1 (critical), with 6 rated critical. None have a confirmed exploitation report. The most common weakness class is CWE-346 (6). Most affected products: ra-tls-clients (3), enclave-os-mini (1), enclave-os-virtual (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.1
- Publish → KEV
- —
- Last 90 days
- 7 prev 0
Products
- ra-tls-clients 3
- enclave-os-mini 1
- enclave-os-virtual 1
- go 1
- rustls 1
Worst active — by depth score
CVE-2026-108362Critical· 9.1Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections50CVE-2026-108269Critical· 9.1Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections50CVE-2026-108268Critical· 9.1Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation50CVE-2026-108267Critical· 9.1Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls50CVE-2026-108266Critical· 9.1Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support50
Privasys vulnerabilities
CVEs affecting Privasys, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
CVE-2026-108362Critical· 9.1Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections
Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS is accepted without requiring an explicitly authorized p…
CVE-2026-108361High· 7.2Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections
Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Before 0.9.1, an attacker with local access could modify workload code, data, and configuration at any time after successfu…
CVE-2026-108269Critical· 9.1Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections
Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key an…
CVE-2026-108268Critical· 9.1Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation
Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and clie…
CVE-2026-108267Critical· 9.1Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls
Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client…
CVE-2026-108266Critical· 9.1Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support
Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certi…
CVE-2026-108265Critical· 9.1Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote …