CVE-2026-23846— Tugtainer vulnerable to Password Exposure via URL Query Parameter
Quick assessment
Affected
Quenary tugtainer
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Tugtainer是Eugene Savin个人开发者的一个具有web UI的自动化Docker容器更新应用程序。 Tugtainer 1.16.1之前版本存在安全漏洞，该漏洞源于密码身份验证机制通过URL查询参数传输密码，可能导致密码被记录在服务器访问日志、浏览器历史记录、Referer标头和代理日志中。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-23846
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Tugtainer vulnerable to Password Exposure via URL Query Parameter
Source: CVE Program / CVE List V5
Vulnerability Description
Tugtainer is a self-hosted app for automating updates of Docker containers. In versions prior to 1.16.1, the password authentication mechanism transmits passwords via URL query parameters instead of the HTTP request body. This causes passwords to be logged in server access logs and potentially exposed through browser history, Referer headers, and proxy logs. Version 1.16.1 patches the issue.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过GET请求中的查询字符串导致的信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
Tugtainer 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Tugtainer是Eugene Savin个人开发者的一个具有web UI的自动化Docker容器更新应用程序。 Tugtainer 1.16.1之前版本存在安全漏洞，该漏洞源于密码身份验证机制通过URL查询参数传输密码，可能导致密码被记录在服务器访问日志、浏览器历史记录、Referer标头和代理日志中。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-23846
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-23846
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-23846 (1)
IV. Related Vulnerabilities
Same product: tugtainer
-
CVE-2026-87004
Tugtainer: OIDC id_token claims accepted without signature/a -
CVE-2026-62308
Tugtainer: Authenticated SSRF via arbitrary notification URL -
CVE-2026-55494
Tugtainer: Unauthenticated access to Tugtainer Agent Docker -
CVE-2026-55181
Tugtainer: OIDC login remains accessible when OIDC_ENABLED i -
CVE-2026-47752
Tugtainer has Server-Side Template Injection in notification
Same vendor: Quenary
-
CVE-2026-87004
Tugtainer: OIDC id_token claims accepted without signature/a -
CVE-2026-62308
Tugtainer: Authenticated SSRF via arbitrary notification URL -
CVE-2026-55494
Tugtainer: Unauthenticated access to Tugtainer Agent Docker -
CVE-2026-55181
Tugtainer: OIDC login remains accessible when OIDC_ENABLED i -
CVE-2026-47752
Tugtainer has Server-Side Template Injection in notification
Same weakness: CWE-598
-
CVE-2026-81632
Single-use sign-in token placed in a redirect query string i -
CVE-2026-50157
Auth0 Symfony: Bearer Token Accepted via URL Query Parameter -
CVE-2026-88897
Flextype CMS through 1.0.0-alpha.3 API Token Exposure via Qu -
CVE-2026-61614
SolidInvoice's long-lived API tokens accepted as URL query p -
CVE-2026-82181
Le-yan｜Medical Practice Management System - Sensitive Data i
V. Comments for CVE-2026-23846
No comments yet