What is GHSA-6m57-vrcv-v9j4?

GHSA-6m57-vrcv-v9j4 is a security advisory published by GitHub Security Advisories with Critical severity. A vulnerability has been identified in Mendix Studio Pro 11 (All versions \u003e= V11.15.0 \u003c V11.16.0)...

Which CVE IDs does GHSA-6m57-vrcv-v9j4 cover?

GHSA-6m57-vrcv-v9j4 covers the following CVE IDs: CVE-2026-112136. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6m57-vrcv-v9j4?

GHSA-6m57-vrcv-v9j4 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-6m57-vrcv-v9j4CriticalCVSS 8.8

A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0)...

Vendor

GitHub Security Advisories

Published

November 10, 2026

Last Modified

November 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-112136 →

📋 Description

A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >= V11.12.6 < V11.12.7). The affected products MCP Server does not properly restrict its HTTP listener to the loopback interface, leaving it potentially exposed to remote systems. This could allow an attacker with network access to interact with the MCP Server remotely.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-112136
https://cert-portal.siemens.com/productcert/html/ssa-710379.html
https://github.com/advisories/GHSA-6m57-vrcv-v9j4