QU
Vendor
Quenary
7
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-87004 | TU tugtainer Quenary | 8.1 | Sep 30 | Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification |
| CVE-2026-62308 | TU tugtainer Quenary | 9.1 | Sep 30 | Tugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpoint |
| CVE-2026-55494 | TU tugtainer Quenary | 9.8 | Sep 30 | Tugtainer: Unauthenticated access to Tugtainer Agent Docker management APIs when AGENT_SECRET is unset |
| CVE-2026-55181 | TU tugtainer Quenary | 9.4 | Sep 30 | Tugtainer: OIDC login remains accessible when OIDC_ENABLED is false |
| CVE-2026-47752 | TU tugtainer Quenary | 9.9 | Jul 23 | Tugtainer has Server-Side Template Injection in notification templates that leads to Remote Code Execution |
| CVE-2026-23846 | TU tugtainer Quenary | 9.1 | Jan 19 | Tugtainer vulnerable to Password Exposure via URL Query Parameter |
| CVE-2025-69201 | TU tugtainer Quenary | 9.8 | Dec 29 | Tugtainer has RCE in Agent Command Execution Api |