CVE-2026-7891

The VerySecureApp made by DIVD using Mendix Studio Pro 11.8.0 Beta allows unintended data exposure due to authorization misconfiguration. The VerySecureApp allows anonymous users of the MyFirstModule with the anonymous user role to gain access to all stored records, even though no access rights a...

CVE-2026-7891

Rejected reason: This CVE has been retracted. Re-investigation confirmed the reported behavior is expected platform configuration and does not expose the protected attribute...

CVE-2026-7891

...

CVE-2026-7891

...

CVE-2026-7891

The affected product is Siemens Mendix (Mendix Runtime, all versions; Mendix Studio Pro up to 11.8.0 Beta). The root cause is a documentation gap regarding the special behavior of the System.User entity with access rules, which may lead developers to unknowingly apply overly permissive rules, res...

Siemens Mendix Studio Pro 安全漏洞

Siemens Mendix Studio Pro is a visualization model-driven IDE developed by the German company Siemens. Versions of Siemens Mendix Studio Pro 11.8.0 Beta and earlier contained security vulnerabilities. These vulnerabilities were caused by incorrect authorization configurations, which could allow...