Will Siemens Mendix Runtime CVE be actively exploited by end of 2026?

CISA alerted to a vulnerability in Siemens Mendix Runtime where inadequate documentation on access rules for the System.User entity may cause developers to configure access rules insecurely. This could enable unauthorized data access in deployed applications. Source: CISA Alerts.

Resolution Criteria

Confirmed via CISA KEV listing, documented exploitation in security firm reports, or vendor advisory confirming in-the-wild attacks targeting this vulnerability.