PT-2026-141590

CVE-2026-112136

·

Published

2026-11-10

·

Updated

2026-11-10

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Mendix Studio Pro versions 11.15.0 through 11.15.x Mendix Studio Pro versions 11.12.6 through 11.12.6
Description The MCP Server does not properly restrict its HTTP listener to the loopback interface, which may leave it exposed to remote systems. This allows an attacker with network access to interact with the MCP Server remotely.
Recommendations Update Mendix Studio Pro versions 11.15.0 through 11.15.x to version 11.16.0. Update Mendix Studio Pro version 11.12.6 to version 11.12.7.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-1327: Binding to an Unrestricted IP Address
Related identifiers
CVE-2026-112136
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com