CVE-2026-111497 Node.js and .NET technologies

Summary

CVE-2026-111497 Node.js and .NET technologies

The fixes for CVE-2026-111497 (Node.js and .NET) have been applied and verified across the affected services in Apsis One and Apsis Pro. We found no indication that any customer data was compromised, and no action is required on your part. In Apsis Pro Marketing Automation remains disabled due to the PHP vulnerabilities announced earlier. We will post a separate update once they are restored.

• Started

  Oct 21, 2026 · 12:24 PM

• Resolved

  Oct 29, 2026 · 11:05 AM

• Duration

  7d 22h 40m

• Severity

  Major

• ◆

  Identified

  Oct 26 · 12:24 PM Apsis Pro

  We are aware of a security vulnerability (CVE-2026-111497) affecting Node.js and .NET, technologies used across our platform. We are applying fixes to the affected services in Apsis One and Apsis Pro. At this time we have found no indication that any customer data has been compromised, and no action is required on your part. Apsis One and Apsis Pro remain available. In Apsis Pro, Form Builder and Marketing Automation remain disabled due to the PHP vulnerabilities announced earlier. We will post an update when the fixes are applied and verified.

• ✓

  Resolved

  Oct 29 · 11:05 AM Apsis Pro

  The fixes for CVE-2026-111497 (Node.js and .NET) have been applied and verified across the affected services in Apsis One and Apsis Pro. We found no indication that any customer data was compromised, and no action is required on your part. In Apsis Pro Marketing Automation remains disabled due to the PHP vulnerabilities announced earlier. We will post a separate update once they are restored.