CVE-2025-11147: Apt-Cacher-NG Project Apt-Cacher-NG

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts (XSS) to be executed in “/html/<filename>.html”.

Affected products

• Apt-Cacher-NG Project Apt-Cacher-NG: version 3.2-1 only

Published 2025-09-29. Last modified 2026-06-17.