From c577f8ee3a99d9099a8eff5d9142cdb4d8c41273 Mon Sep 17 00:00:00 2001 From: MarkvanMents Date: Wed, 8 Jul 2026 12:36:14 +0200 Subject: [PATCH 1/2] Update security advisory with CVE-2026-7891 --- content/en/docs/releasenotes/security-advisories/_index.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/en/docs/releasenotes/security-advisories/_index.md b/content/en/docs/releasenotes/security-advisories/_index.md index 5ffce74b041..a353aced374 100644 --- a/content/en/docs/releasenotes/security-advisories/_index.md +++ b/content/en/docs/releasenotes/security-advisories/_index.md @@ -20,8 +20,8 @@ Siemens publishes their common vulnerabilities and exposures (CVE) on the second | CVE ID | CVSS v3.1 Base Score | Siemens Security Advisory (SSA) Description | Notes | | --- | --- | --- | --- | -| CVE-2026-48192 | 5.4 | [Arbitrary Code Execution Vulnerability in Mendix Studio Pro Before V11.12](https://cert-portal.siemens.com/productcert/html/ssa-779310.html) | See the SSA description for remediation details. | -| CVE-2025-40834 | 5.7 | [Cross-Site Scripting Vulnerability in Mendix Rich Text Widget](https://cert-portal.siemens.com/productcert/html/ssa-190588.html) | See the SSA description for remediation details. | +| CVE-2026-7891 | 9.1 | [Insecure Inherited Permission in Mendix](https://cert-portal.siemens.com/productcert/html/ssa-814963.html) | See the SSA description for remediation details. | +| CVE-2026-48192 | 5.4 | [Arbitrary Code Execution Vulnerability in Mendix Studio Pro Before V11.12](https://cert-portal.siemens.com/productcert/html/ssa-779310.html) | See the SSA description for remediation details. || CVE-2025-40834 | 5.7 | [Cross-Site Scripting Vulnerability in Mendix Rich Text Widget](https://cert-portal.siemens.com/productcert/html/ssa-190588.html) | See the SSA description for remediation details. | | CVE-2025-40758 | 8.7 | [Account Hijacking Vulnerability in Mendix SAML Module](https://cert-portal.siemens.com/productcert/html/ssa-395458.html) | See the SSA description for remediation details. | | CVE-2025-40592 | 6.1 | [Zip Path Traversal Vulnerability in Mendix Studio Pro's Module Installation Process](https://cert-portal.siemens.com/productcert/html/ssa-627195.html) | See the SSA description for remediation details. | | CVE-2025-40571 | 2.2 | [Incorrect Privilege Assignment Vulnerability in Mendix OIDC SSO Module](https://cert-portal.siemens.com/productcert/html/ssa-726617.html) | See the SSA description for remediation details. | From 1117e056608816fa53c22cb2e60c03e322e2016b Mon Sep 17 00:00:00 2001 From: MarkvanMents Date: Tue, 14 Jul 2026 11:21:23 +0200 Subject: [PATCH 2/2] Correct formatting error --- content/en/docs/releasenotes/security-advisories/_index.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/content/en/docs/releasenotes/security-advisories/_index.md b/content/en/docs/releasenotes/security-advisories/_index.md index a353aced374..8ea45ca9ca7 100644 --- a/content/en/docs/releasenotes/security-advisories/_index.md +++ b/content/en/docs/releasenotes/security-advisories/_index.md @@ -21,7 +21,8 @@ Siemens publishes their common vulnerabilities and exposures (CVE) on the second | CVE ID | CVSS v3.1 Base Score | Siemens Security Advisory (SSA) Description | Notes | | --- | --- | --- | --- | | CVE-2026-7891 | 9.1 | [Insecure Inherited Permission in Mendix](https://cert-portal.siemens.com/productcert/html/ssa-814963.html) | See the SSA description for remediation details. | -| CVE-2026-48192 | 5.4 | [Arbitrary Code Execution Vulnerability in Mendix Studio Pro Before V11.12](https://cert-portal.siemens.com/productcert/html/ssa-779310.html) | See the SSA description for remediation details. || CVE-2025-40834 | 5.7 | [Cross-Site Scripting Vulnerability in Mendix Rich Text Widget](https://cert-portal.siemens.com/productcert/html/ssa-190588.html) | See the SSA description for remediation details. | +| CVE-2026-48192 | 5.4 | [Arbitrary Code Execution Vulnerability in Mendix Studio Pro Before V11.12](https://cert-portal.siemens.com/productcert/html/ssa-779310.html) | See the SSA description for remediation details. | +| CVE-2025-40834 | 5.7 | [Cross-Site Scripting Vulnerability in Mendix Rich Text Widget](https://cert-portal.siemens.com/productcert/html/ssa-190588.html) | See the SSA description for remediation details. | | CVE-2025-40758 | 8.7 | [Account Hijacking Vulnerability in Mendix SAML Module](https://cert-portal.siemens.com/productcert/html/ssa-395458.html) | See the SSA description for remediation details. | | CVE-2025-40592 | 6.1 | [Zip Path Traversal Vulnerability in Mendix Studio Pro's Module Installation Process](https://cert-portal.siemens.com/productcert/html/ssa-627195.html) | See the SSA description for remediation details. | | CVE-2025-40571 | 2.2 | [Incorrect Privilege Assignment Vulnerability in Mendix OIDC SSO Module](https://cert-portal.siemens.com/productcert/html/ssa-726617.html) | See the SSA description for remediation details. |