SSA-710379 — SSA-710379: Multiple Vulnerabilities in Mendix Studio Pro's MCP Server

Summary

Mendix Studio Pro contains multiple vulnerabilities in the MCP Server, that could allow an attacker with network access to interact with the server remotely or trick a user's browser into sending unauthorized requests, potentially leading to unauthorized data access, tool execution, or system compromise.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 2

High 8.8

CVE-2026-112136

A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11…

Siemens Mendix Studio Pro 11.12 Mendix Studio Pro 11 ICS / OT

Nov 10, 2026
Medium 5.1

CVE-2026-112137

A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11…

Siemens Mendix Studio Pro 11 Mendix Studio Pro 11.12 ICS / OT

Nov 10, 2026

Revision history

2026-11-10 #1
Publication Date

References

SSA-710379: Multiple Vulnerabilities in Mendix Studio Pro's MCP Server - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-710379.html