CVE-2026-112136

{
  "etk_id": "ETK-2026-4050",
  "cve_id": "CVE-2026-112136",
  "display_id": "CVE-2026-112136",
  "ghsa_id": "GHSA-6m57-vrcv-v9j4",
  "euvd_id": "EUVD-2026-120890",
  "status": "published",
  "anchor_state": "anchored",
  "title": "MCP Server network listener exposure in Mendix Studio Pro 11",
  "summary": "Mendix Studio Pro 11 MCP Server may listen beyond the local host in affected 11.15.x and 11.12.x releases. A remote party with network access may be able to interact with the MCP Server when its listener is reachable.",
  "mitigation": "Upgrade Mendix Studio Pro 11 to V11.16.0 or later, or upgrade the 11.12 release line to V11.12.7 or later. Until upgraded, restrict network access to MCP Server listeners to trusted local or administrative hosts.",
  "vendor": "Siemens",
  "product": "Mendix Studio Pro 11",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= V11.15.0, < V11.16.0"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "V11.16.0"
      ],
      "package_name": "Mendix Studio Pro 11",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= V11.12.6, < V11.12.7"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "V11.12.7"
      ],
      "package_name": "Mendix Studio Pro 11.12",
      "purl": null
    }
  ],
  "cwes": [
    1327
  ],
  "cvss_score": 9.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 27.8710983,
  "t0_at": "2026-11-10T11:30:41.077000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-10T11:30:41.077000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-10T11:30:41.077000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112136"
    }
  }
}