QQuenary

Products

Exploited and recent CVEs

• CVE-2026-87004 High 8.1 Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification 0.3%
• CVE-2026-62308 Critical 9.1 Tugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpoint 0.3%
• CVE-2026-55494 Critical 9.8 Tugtainer: Unauthenticated access to Tugtainer Agent Docker management APIs when AGENT_SECRET is unset 0.6%
• CVE-2026-55181 Critical 9.4 Tugtainer: OIDC login remains accessible when OIDC_ENABLED is false 0.6%
• CVE-2026-47752 Critical 9.9 Tugtainer has Server-Side Template Injection in notification templates that leads to Remote Code Execution 0.4%
• CVE-2026-23846 High 8.1 Tugtainer vulnerable to Password Exposure via URL Query Parameter 0.5%
• CVE-2025-69201 High 8.1 Tugtainer has RCE in Agent Command Execution Api 0.5%