CVE-2026-112136 | BDVDB-2026-402790 Detail
SiemensMendix Studio Pro 11
Description#
A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >= V11.12.6 < V11.12.7). The affected products MCP Server does not properly restrict its HTTP listener to the loopback interface, leaving it potentially exposed to remote systems. This could allow an attacker with network access to interact with the MCP Server remotely.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-1327 Binding to an Unrestricted IP Address
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.