The server's HTTP listener is not properly restricted to the loopback interface.A network-accessible attacker may therefore interact with the MCP Server remotely. Siemens assigns CVSS 4.0 9.2 Critical and CVSS 3.1 8.8 High scores.
What it allows
How Does CVE-2026-112136 Expose the Mendix MCP Server?
The affected MCP Server binds its HTTP listener beyond the loopback interface. A service intended for local interaction may consequently become reachable from other systems on an accessible network.
An attacker needs network access to the listener but does not need privileges, according to both CVSS vectors. Siemens says remote interaction may lead to unauthorized data access, tool execution, or system compromise when discussing the advisory's vulnerabilities together.
For this specific CVE, the confirmed outcome is remote interaction with the MCP Server. Teams should not transfer the cross-site request forgery behavior of CVE-2026-112137 into this attack path.
What Is Known About Exploitation?
CISA's November 9, 2026 Known Exploited Vulnerabilities catalog does not list CVE-2026-112136. Exploitation remains unknown, so exposure and installed version should drive prioritization.
Who is affected
Which Mendix Studio Pro Versions Are Affected?
Siemens lists Mendix Studio Pro 11 versions from 11.15.0 up to, but not including, 11.16.0. The remediation is an update to version 11.16.0 or later.
The separate long-term support line includes Mendix Studio Pro 11.12 versions from 11.12.6 up to, but not including, 11.12.7. Siemens directs customers on that line to version 11.12.7 or later.
Teams should record the release line and exact installed build in their vulnerability management process. The two fixed-version thresholds are not interchangeable.
Timeline
- 2026-11-10
Siemens published SSA-710379 and NVD published the CVE record.
What to do
-
Inventory Mendix Studio Pro builds
Identify Studio Pro 11 installations and record whether each uses the 11.15 or 11.12 release line. Check whether the MCP Server is enabled and network reachable.
-
Apply the matching Siemens update
Update 11.15 installations to 11.16.0 or later. Update 11.12 installations to 11.12.7 or later through the established patch management process.
-
Block direct inbound access
Follow Siemens guidance by blocking external traffic to the MCP Server listener. Use network segmentation and strict host firewall rules while remediation is pending.
-
Use an authenticated channel when required
If remote access is necessary, Siemens recommends a secure, authenticated channel such as a VPN or SSH tunnel. Do not open direct inbound firewall access.
-
Validate the corrected exposure
After updating, confirm the installed build and verify that the listener is limited to the intended interface. Review firewall policy for unnecessary inbound reachability.
What Brandefense can do
- Scan your domain in Brandefense Atlas, free
Atlas checks public sources for leaked credentials, phishing domains, dark web mentions and data sales, then gives your domain a risk grade. Free, no sign-up.
- Vulnerability Intelligence
Brandefense Vulnerability Intelligence follows which vulnerabilities attackers are using, so your team can patch what is under attack first.
Frequently Asked Questions
What is CVE-2026-112136?
It is a critical unrestricted binding vulnerability in the Mendix Studio Pro 11 MCP Server. The HTTP listener may be reachable beyond the local system.
Which Mendix Studio Pro versions are affected by CVE-2026-112136?
Affected versions are 11.15.0 through 11.15.x before 11.16.0, and 11.12.6 before 11.12.7.
How should teams fix CVE-2026-112136?
Update the 11.15 line to 11.16.0 or later, or the 11.12 line to 11.12.7 or later. Restrict inbound access during remediation.
Does CVE-2026-112136 require authentication?
The CVSS vectors record no privileges required. An attacker must have network access to the exposed MCP Server listener.
Sources
- SSA-710379: Multiple Vulnerabilities in Mendix Studio Pro's MCP ServerSiemens ProductCERT
- CVE-2026-112136 DetailNIST National Vulnerability Database
- Known Exploited Vulnerabilities CatalogCISA
