Cpe:2.3:a:siemens:mendix_studio_pro:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3asiemensmendix_studio_pro/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 10 Nov 2026 17:00:03 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSiemens Mendix Studio Pro: Improper MCP Server HTTP listener restriction (CVE-2026-112136)https://feed.craftedsignal.io/briefs/2026-11-cve-2026-112136/Tue, 10 Nov 2026 17:00:03 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-cve-2026-112136/A vulnerability in the Siemens Mendix Studio Pro MCP Server component allows remote interaction due to improper HTTP listener restrictions. A public proof-of-concept exploit is available.<p>A vulnerability (CVE-2026-112136) has been identified in the Mendix Studio Pro MCP Server. The server does not properly restrict its HTTP listener to the loopback interface, which may allow an attacker with network access to interact with the MCP Server remotely.</p> highadvisory