CVE-2025-11146: Apt-Cacher-NG Project Apt-Cacher-NG

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts (XSS) in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”.

Affected products

• Apt-Cacher-NG Project Apt-Cacher-NG: version 3.2-1 only

Published 2025-09-29. Last modified 2026-06-17.