InfraGuard

Aptabase vulnerabilities (CVE list)

2 CVEs9.1 max CVSS

Affected version lines

Known vulnerabilities

CVE Title Affected versions CVSS Exploited EPSS Published
CVE-2026-125758 Aptabase before commit 61d4c01 Authentication Bypass via Known Example AUTH_SECRET < 61d4c01298a706d575265461ac07bb956ca7b8d2 9.1 0.3% 2026-11-11
CVE-2026-63080 Aptabase SQL Injection via ClickHouse query backend ≤ 5a8936852a20c26267ffaefd3544f91e3ca94135 7.1 — 2026-07-22

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.

Data: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (see EPSS at https://www.first.org/epss), endoflife.date. Software list: awesome-selfhosted (CC BY-SA 3.0).