Vulnerabilidades em Quenary

7 resultados

Análise Vexday

Quenary apresenta um perfil de risco contido com apenas 3 vulnerabilidades catalogadas, sendo 1 crítica e nenhuma sob exploração ativa conhecida. A presença de apenas 1 CVE publicado nos últimos 90 dias sugere que o risco atual é baixo, embora a fraqueza dominante (CWE-1336, relacionada a uso inseguro de APIs) mereça monitoramento contínuo.

CVE-2026-55494CRITICALTugtainer: Unauthenticated access to Tugtainer Agent Docker management APIs when AGENT_SECRET is unsetEPSS 0.6%CVE-2026-55181CRITICALTugtainer: OIDC login remains accessible when OIDC_ENABLED is falseEPSS 0.6%CVE-2026-23846HIGHTugtainer vulnerable to Password Exposure via URL Query ParameterEPSS 0.5%CVE-2025-69201HIGHTugtainer has RCE in Agent Command Execution ApiEPSS 0.5%CVE-2026-47752CRITICALTugtainer has Server-Side Template Injection in notification templates that leads to Remote Code ExecutionEPSS 0.4%CVE-2026-62308CRITICALTugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpointEPSS 0.3%CVE-2026-87004HIGHTugtainer: OIDC id_token claims accepted without signature/audience/expiry verificationEPSS 0.3%