CVE-2026-112136
8.8 HIGHPublished 2026-11-10 · Updated 2026-11-10
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >= V11.12.6 < V11.12.7). The affected products MCP Server does not properly restrict its HTTP listener to the loopback interface, leaving it potentially exposed to remote systems. This could allow an attacker with network access to interact with the MCP Server remotely.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-1327
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-100868PoC
- HIGHCVE-2026-108760PoC
- UNSCOREDCVE-2026-111249
- CRITICALCVE-2026-112346PoC
- HIGHCVE-2026-119249
- HIGHCVE-2026-59177PoC
- CRITICALCVE-2026-92559
- UNSCOREDCVE-2026-97849
Related by shared AI tags and CWE weakness class. Browse the full archive.