Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Quenary vulnerabilities

7 published CVEs name Quenary among the affected products.

Newest CVEs

  • CVE-2026-87004

    Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification

    Quenary · tugtainer

    High8.1
  • CVE-2026-62308

    Tugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpoint

    Quenary · tugtainer

    Critical9.1
  • CVE-2026-55494

    Tugtainer: Unauthenticated access to Tugtainer Agent Docker management APIs when AGENT_SECRET is unset

    Quenary · tugtainer

    Critical9.8
  • CVE-2026-55181

    Tugtainer: OIDC login remains accessible when OIDC_ENABLED is false

    Quenary · tugtainer

    Critical9.4
  • CVE-2026-47752

    Tugtainer has Server-Side Template Injection in notification templates that leads to Remote Code Execution

    Quenary · tugtainer

    Critical9.9
  • CVE-2026-23846

    Tugtainer vulnerable to Password Exposure via URL Query Parameter

    Quenary · tugtainer

    High8.1
  • CVE-2025-69201

    Tugtainer has RCE in Agent Command Execution Api

    Quenary · tugtainer

    High8.1