{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/mendix-studio-pro/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:siemens:mendix_studio_pro:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-112136"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Mendix Studio Pro"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Siemens"],"content_html":"\u003cp\u003eA vulnerability (CVE-2026-112136) has been identified in the Mendix Studio Pro MCP Server. The server does not properly restrict its HTTP listener to the loopback interface, which may allow an attacker with network access to interact with the MCP Server remotely.\u003c/p\u003e\n","date_modified":"2026-11-10T17:00:03Z","date_published":"2026-11-10T17:00:03Z","id":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-112136/","summary":"A vulnerability in the Siemens Mendix Studio Pro MCP Server component allows remote interaction due to improper HTTP listener restrictions. A public proof-of-concept exploit is available.","title":"Siemens Mendix Studio Pro: Improper MCP Server HTTP listener restriction (CVE-2026-112136)","url":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-112136/"}],"language":"en","title":"CraftedSignal Threat Feed - Mendix Studio Pro","version":"https://jsonfeed.org/version/1.1"}