SSTI in Soagen Informatics' Apinizer
CVE-2026-11561

5.3MEDIUM

Key Information:

Vendor

Soagen Informatics Technologies Software And Consulting Inc.

Status
Apinizer
Vendor
CVE Published:
11 June 2026

What is CVE-2026-11561?

Improper neutralization of special elements used in an expression language statement ('expression language injection') vulnerability in Soagen Informatics Technologies Software and Consulting Inc. Apinizer allows Code Injection.

This issue affects Apinizer: from 2026.04.0 before 2026.04.6.

Affected Version(s)

Apinizer 2026.04.0 < 2026.04.6

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Alperen KESKÄ°N
.