{"id":"CVE-2026-112136","aliases":[],"cve":{"records":[{"id":"CVE-2026-112136","source":"siemens","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-19T04:39:55.733Z","published":"2026-11-10T11:30:41.077Z","modified":"2026-11-10T16:34:11.685Z"}],"publishers":[{"name":"siemens","role":"CNA","organizationId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","modified":"2026-11-10T11:30:41.077Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-10T16:34:11.685Z"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-710379.html","tags":[],"source":"siemens"}],"weaknesses":[{"id":"CWE-1327","description":"CWE-1327: Binding to an Unrestricted IP Address","source":"siemens"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-10T16:34:00.788095Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 = V11.12.6 < V11.12.7).","titleSource":"siemens","descriptionSource":"siemens","description":"A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >= V11.12.6 < V11.12.7). The affected products MCP Server does not properly restrict its HTTP listener to the loopback interface, leaving it potentially exposed to remote systems. This could allow an attacker with network access to interact with the MCP Server remotely.","score":9.2,"severity":"critical","published":"2026-11-10T11:30:41.077Z","modified":"2026-11-10T16:34:11.685Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Siemens","name":"Mendix Studio Pro 11","platforms":[],"versions":[{"version":"V11.15.0","status":"affected","lessThan":"V11.16.0","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"siemens","url":"https://www.cve.org/CVERecord?id=CVE-2026-112136"},{"vendor":"Siemens","name":"Mendix Studio Pro 11.12","platforms":[],"versions":[{"version":"V11.12.6","status":"affected","lessThan":"V11.12.7","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"siemens","url":"https://www.cve.org/CVERecord?id=CVE-2026-112136"}],"remediation":[],"references":["https://cert-portal.siemens.com/productcert/html/ssa-710379.html"],"sources":[{"name":"CVE","id":"CVE-2026-112136","modified":"2026-11-10T16:34:11.685Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-112136"}],"assessments":[{"source":"siemens","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":8.8},{"source":"siemens","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":9.2}],"sourceAffected":[],"observedAt":"2026-11-10T16:36:47.139Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T00:15:33.603Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-11-10T11:50:48.505Z","attemptedAt":"2026-11-10T11:50:48.505Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-10T11:50:33.346Z","attemptedAt":"2026-11-10T11:50:33.346Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-10T11:50:32.733Z","attemptedAt":"2026-11-10T11:50:32.733Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-10T11:50:33.264Z","attemptedAt":"2026-11-10T11:50:33.264Z"}],"evidence":[],"aiSummary":{"text":"Mendix Studio Pro 11 versions 11.15.0 to 11.16.0 and 11.12.6 to 11.12.7 have a vulnerability where the MCP Server's HTTP listener is not restricted to the loopback interface. An attacker with network access may interact with the MCP Server remotely.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-10T11:46:02.276Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-112136"}]}}