Main Vulnerability Database Vulnerabilities #VU136037

Code Injection in Mendix Studio Pro 10 and Mendix Studio Pro 11 - CVE-2026-48192

Published: July 1, 2026

Vulnerability identifier: #VU136037

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-48192

CWE-ID: CWE-94

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation. A remote administrator can trick a victim to open a specially crafted file and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

Mendix Studio Pro 10
Mendix Studio Pro 11

How to mitigate CVE-2026-48192

Install updates from vendor's website.

Mendix Studio Pro 10 - update to 10.24.21
Mendix Studio Pro 11 - update to 11.6.7

External References

https://cert-portal.siemens.com/productcert/html/ssa-779310.html

Related Security Bulletins