VYPR
← All advisories
High severity8.8NVD Advisory· Published Nov 10, 2026

CVE-2026-112136

CVE-2026-112136

Description

A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >= V11.12.6 < V11.12.7). The affected products MCP Server does not properly restrict its HTTP listener to the loopback interface, leaving it potentially exposed to remote systems. This could allow an attacker with network access to interact with the MCP Server remotely.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1
  • Mendix/MCP Serverllm-create
    Range: >= V11.15.0 < V11.16.0, >= V11.12.6 < V11.12.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.