Quenary has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was September 2026 with 4. The median CVSS is 9.3 (critical), with 3 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.3
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Worst active — by depth score
CVE-2026-55494Critical· 9.8Tugtainer is a self-hosted app for automating updates of Docker containers66CVE-2026-87004High· 8.1Tugtainer is a self-hosted app for automating updates of Docker containers57CVE-2026-55181Critical· 9.4Tugtainer is a self-hosted app for automating updates of Docker containers52CVE-2026-62308Critical· 9.1Tugtainer is a self-hosted app for automating updates of Docker containers50
Quenary vulnerabilities
CVEs affecting Quenary, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-87004High· 8.1PoCTugtainer is a self-hosted app for automating updates of Docker containers
Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.31.3, when the OIDC login flow completes, backend/modules/auth/providers/auth_oidc_provider.py decodes the id_token returned by the identity p…
CVE-2026-55494Critical· 9.8PoCTugtainer is a self-hosted app for automating updates of Docker containers
Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.4, Tugtainer Agent allows unauthenticated access to Docker management APIs when AGENT_SECRET is not configured. The Agent uses request sign…
CVE-2026-55181Critical· 9.4Tugtainer is a self-hosted app for automating updates of Docker containers
Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.3, Tugtainer's OIDC authentication can still be initiated even when OIDC_ENABLED=false. The /auth/oidc/enabled endpoint correctly reports t…
CVE-2026-62308Critical· 9.1Tugtainer is a self-hosted app for automating updates of Docker containers
Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.6, Tugtainer allows an authenticated user to make the backend server send outbound HTTP requests to arbitrary user-supplied URLs through th…