by Kastro
Paper/Archive/CVE-2026-11561

CVE-2026-11561

Soagen Informatics Technologies Software and Consulting Inc. Apinizer — SSTI in Soagen Informatics' Apinizer

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 39.1.391 × 207.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper neutralization of special elements used in an expression language statement ('expression language injection') vulnerability in Soagen Informatics Technologies Software and Consulting Inc. Apinizer allows Code Injection. This issue affects Apinizer: from 2026.04.0 before 2026.04.6.

Affected

ProductAffectedFixed inSource
Apinizer2026.04.0 – < 2026.04.62026.04.6CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0365