security_identifier

CVE-2026-7891

Rejected CVE identifier originally assigned to a reported permissions issue in Siemens Mendix Runtime.

Current clusters

CVE-2026-7891 in Siemens Mendix Runtime is retracted as expected platform configuration

CISA revoked its Siemens Mendix Runtime advisory and marked all versions not affected by CVE-2026-7891, now retracted as expected configuration. OT and application teams holding tickets for it can close them with no Runtime upgrade to schedule.

Publishers:cisa.gov

Reality

Evidence72
Adoption: Insufficient
Hype gap0
Incentives: Insufficient
Confidence68