APTRS vulnerabilities

Products

• APTRS 2

Latest APTRS CVEs

Newest publication first

1. CVE-2026-34406 APTRS: Privilege Escalation via Mass Assignment of is_superuser in User Edit Endpoint

   Published 2026-03-31

   Critical·CVSS 9.4 EPSS 0.52%

   APTRS (Automated Penetration Testing Reporting System) is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. Prior to version 2.0.1, the edit_user endpoint (POST /api/auth/edituser/<pk>) allows Any user who can reach th...

2. CVE-2024-56363 APTRS has SSTI vulnerability

   Published 2024-12-23

   High·CVSS 7.8 EPSS 0.34%

   APTRS (Automated Penetration Testing Reporting System) is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerability in the web application's handling of user-supplied input that is incorporated...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.