Improper neutralization of special elements used in an expression language statement ('expression language injection') vulnerability in Soagen Informatics Technologies Software and Consulting Inc.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00449·Published 2026-06-11·Fixed in 2026.04.6CWE-917