Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/alperenkesk/cve-2026-11561
Vulnerability ScannersVulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubalperenkesk/cve-2026-11561

CVE-2026-11561

Nuclei template for CVE-2026-11561 — Apinizer SSTI / RCE version detection

View Repository
112 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-11561 — Apinizer SSTI / RCE Version Check (Infra)

Nuclei template to detect Apinizer versions lower than 2026.04.6, which are vulnerable to CVE-2026-11561 (Server-Side Template Injection leading to Remote Code Execution, CVSS 9.8).

Usage

root@kitploit:~
echo <target-url> | nuclei -t CVE-2026-11561.yaml

How it works

  1. Fetches the admin panel (internal/infra UI) homepage and extracts the main JavaScript file path (e.g. main.xxxx.js).
  2. Fetches the JS file and matches the VERSION string against vulnerable version patterns.

Vulnerability

CVE-2026-11561 affects Apinizer versions < 2026.04.6.

Proof of Concept

PoC

Note

The Apinizer admin panel is an internal/infra component typically deployed on internal networks and is not publicly exposed. Version information is extracted from the admin UI's JavaScript bundle. This template targets the management plane, not the API gateway.

Download Tool