CVE-2026-55181

Published 30 September 2026 · tracked since 1 October 2026

Description

Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.3, Tugtainer's OIDC authentication can still be initiated even when OIDC_ENABLED=false. The /auth/oidc/enabled endpoint correctly reports that OIDC is disabled. However, a direct request to /auth/oidc/l

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-102377 HIGH 8.8
• CVE-2026-100512 CRITICAL 9.8
• CVE-2026-62308 CRITICAL 9.1
• CVE-2026-55494 CRITICAL 9.8
• CVE-2026-46711 HIGH 8.3
• CVE-2026-47571 HIGH 7.8
• CVE-2026-47573 HIGH 7.8
• CVE-2026-47575 HIGH 7.8
• CVE-2026-47570 HIGH 7.8
• CVE-2026-47559 HIGH 7.8

→ Open the live CVE board · all tools