CVE-2026-11561 — SSTI in Soagen Informatics' Apinizer

CVE-2026-11561

SSTI in Soagen Informatics' Apinizer PUBLISHED

Description (CNA)

Improper neutralization of special elements used in an expression language statement ('expression language injection') vulnerability in Soagen Informatics Technologies Software and Consulting Inc. Apinizer allows Code Injection. This issue affects Apinizer: from 2026.04.0 before 2026.04.6.

Affected (CNA)

Vendor / product	Versions
Soagen Informatics Technologies Software and Consulting Inc. / Apinizer	affected 2026.04.0 before 2026.04.6

CWE

CWE-917

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0365

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.