Threat
SSA-710379
Publication date unknown · Discovered siemens.com
Page published
Publication date unknown · First observed: 11 Nov 2026
Coverage timeline
Single-source advisory — one report is available.
Why it matters
Defenders using Mendix Studio Pro should install the fixed releases and apply the recommended network and browser protections to prevent unauthorized access to MCP tools and data.
Siemens advisory SSA-710379 discloses CVE-2026-112136 and CVE-2026-112137 in Mendix Studio Pro's MCP server, which could permit unauthorized network access or browser-mediated requests leading to data access, tool execution, or system compromise. Affected releases are versions 11.15.0 through versions before 11.16.0, and 11.12.6; Siemens provides fixes in 11.16.0 and 11.12.7, respectively.