CVE-2026-111497 Node.js and .NET technologies

Incident Report for Apsis One

Identified

We are aware of a security vulnerability (CVE-2026-111497) affecting Node.js and .NET, technologies used across our platform. We are applying fixes to the affected services in Apsis One and Apsis Pro.
At this time we have found no indication that any customer data has been compromised, and no action is required on your part.
Apsis One and Apsis Pro remain available. In Apsis Pro, Form Builder and Marketing Automation remain disabled due to the PHP vulnerabilities announced earlier.
We will post an update when the fixes are applied and verified.
Posted Oct 21, 2026 - 13:26 CEST