Login Request a demo
TU
Product
tugtainer
by Quenary · last CVE Sep 30, 2026
7
CVEs
0
On KEV
9.9
Max CVSS
4
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 6High 1Medium 0Low 0
Severity
All severities7Critical6High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add tugtainer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47752
9.9
0%
Jul 23
Tugtainer has Server-Side Template Injection in notification templates that leads to Remote Code Execution
Affected: < 1.30.2
CVE-2026-55494
9.8
1%
Sep 30
Tugtainer: Unauthenticated access to Tugtainer Agent Docker management APIs when AGENT_SECRET is unset
Affected: < 1.30.4
CVE-2025-69201
9.8
0%
Dec 29
Tugtainer has RCE in Agent Command Execution Api
Affected: < 1.15.1
CVE-2026-55181
9.4
1%
Sep 30
Tugtainer: OIDC login remains accessible when OIDC_ENABLED is false
Affected: < 1.30.3
CVE-2026-62308
9.1
0%
Sep 30
Tugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpoint
Affected: < 1.30.6
CVE-2026-23846
9.1
0%
Jan 19
Tugtainer vulnerable to Password Exposure via URL Query Parameter
Affected: < 1.16.1
CVE-2026-87004
8.1
0%
Sep 30
Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification
Affected: < 1.31.3
Showing 7