Apsis Pro incident

CVE-2026-111497 Node.js and .NET technologies

Ongoing since 12:24 PM UTC, affecting Forms, Formbuilder and Marketing automation.

identified Oct 26, 2026, 12:24 PM UTC

We are aware of a security vulnerability (CVE-2026-111497) affecting Node.js and .NET, technologies used across our platform. We are applying fixes to the affected services in Apsis One and Apsis Pro. At this time we have found no indication that any customer data has been compromised, and no action is required on your part. Apsis One and Apsis Pro remain available. In Apsis Pro, Form Builder and Marketing Automation remain disabled due to the PHP vulnerabilities announced earlier. We will post an update when the fixes are applied and verified.

Started
Oct 21, 2026, 12:24 PM UTC
Resolved
Ongoing
Duration
● 5d
Detected by Pingoru
Oct 21, 2026, 12:24 PM UTC

Affected components

Forms, FormbuilderMarketing automation

Update timeline

  1. identified Oct 26, 2026, 12:24 PM UTC

    We are aware of a security vulnerability (CVE-2026-111497) affecting Node.js and .NET, technologies used across our platform. We are applying fixes to the affected services in Apsis One and Apsis Pro. At this time we have found no indication that any customer data has been compromised, and no action is required on your part. Apsis One and Apsis Pro remain available. In Apsis Pro, Form Builder and Marketing Automation remain disabled due to the PHP vulnerabilities announced earlier. We will post an update when the fixes are applied and verified.

Your product runs on more than Apsis Pro

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →