Aptsys vulnerabilities
We track 3 vulnerabilities in Aptsys products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 23, 2026.
Latest Aptsys vulnerabilities
- 7.5 High severity
Gemscms Backend: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28. This unauthenticated endpoint returns a list of cashier accounts, including names, email addresses, usernames, an
- 9.4 Critical severity
Gemscms Backend: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in the GetServiceByRestaurantID endpoint of the Aptsys gemscms POS Platform backend thru 2025-05-28. The vulnerability arises because user input is directly inserted into a dynamic SQL query syntax without proper sanitizat
- 9.4 Critical severity
Gemscms Backend: Missing Authentication for Critical Functionality
A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauthenticated users. By accessing specific URLs, an attacker is presented with a directory-style index listing all available ba