CVE-2026-112136
Received Received - Intake

MCP Server HTTP Listener Exposure in Mendix Studio Pro

Publication date: 2026-11-10

Last updated on: 2026-11-10

Assigner: siemens-SADP

Description
A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >= V11.12.6 < V11.12.7). The affected products MCP Server does not properly restrict its HTTP listener to the loopback interface, leaving it potentially exposed to remote systems. This could allow an attacker with network access to interact with the MCP Server remotely.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-10
Last Modified
2026-11-10
Generated
2026-11-10
AI Q&A
2026-11-10
EPSS Evaluated
N/A
NVD
CVE-2026-112136
EUVD
EUVD-2026-120890

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
mendix mendix_studio_pro From 11.15.0 (inc) to 11.16.0 (exc)
mendix mendix_studio_pro From 11.12.6 (inc) to 11.12.7 (exc)
siemens mcp_server *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1327 The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-112136 is a vulnerability in Siemens' Mendix Studio Pro MCP Server where the HTTP listener is not properly restricted to the loopback interface. This allows remote attackers with network access to interact with the server, potentially leading to unauthorized data access, tool execution, or system compromise.

Detection Guidance

Check if the MCP Server's HTTP listener on port 7782 is exposed to the network by running: netstat -tulnp | grep 7782 or ss -tulnp | grep 7782. Verify firewall rules to ensure only loopback (127.0.0.1) is allowed. Inspect Mendix Studio Pro version via Help > About to confirm if affected versions (11.15.0-11.16.0 or 11.12.6-11.12.7) are installed.

Scan for open ports 7782 on local and remote systems using nmap -p 7782 localhost or nmap -p 7782 <target_IP>. Review network traffic logs for unexpected connections to this port.

Impact Analysis

An attacker could exploit this to remotely access sensitive data, execute unauthorized tools, or compromise the system. This may result in data breaches, operational disruptions, or further network infiltration if the server is part of a larger infrastructure.

Compliance Impact

This vulnerability could lead to unauthorized data access, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Non-compliance may result in legal penalties, reputational damage, and loss of trust.

Mitigation Strategies

Update Mendix Studio Pro to V11.16.0 or later (for version 11) or V11.12.7 or later (for version 11.12) immediately. Block external access to port 7782 via firewall rules. Restrict remote access to secure channels like VPN or SSH tunnels.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112136. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...