Skip to content
OpenAdvisories

Vendor

APTRS

2 known vulnerabilities.

Products

APTRS 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2026-34406

    APTRS: Privilege Escalation via Mass Assignment of is_superuser in User Edit Endpoint

    APTRS (Automated Penetration Testing Reporting System) is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. Prior to version 2.0.1, the edit_user endpoint (POST /api/auth/edituser/<pk>) allows Any …

    APTRS APTRS