What’s Vulnerable › Products

Quenary tugtainer vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Quenary tugtainer version is affected

Latest Quenary tugtainer vulnerabilities

• CVE-2026-87004 — Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification (CVSS 8.1)
• CVE-2026-62308 — Tugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpoint (CVSS 9.1)
• CVE-2026-55494 — Tugtainer: Unauthenticated access to Tugtainer Agent Docker management APIs when AGENT_SECRET is unset (CVSS 9.8)
• CVE-2026-55181 — Tugtainer: OIDC login remains accessible when OIDC_ENABLED is false (CVSS 9.4)
• CVE-2026-47752 — Tugtainer has Server-Side Template Injection in notification templates that leads to Remote Code Execution (CVSS 9.9)
• CVE-2026-23846 — Tugtainer vulnerable to Password Exposure via URL Query Parameter (CVSS 9.1)
• CVE-2025-69201 — Tugtainer has RCE in Agent Command Execution Api (CVSS 9.8)