CVE-2024-36539

9.8 criticalEPSS 1.3%

Critical (9.8) in projectcontour contour. EPSS 1.3% chance of exploitation in the next 30 days.

Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-277
Published: 2024-07-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19