Mendix SAML

Search everything

Mentions · 7d2
Mentions · 30d2
All mentions3
First seenSep 3, 2026
Last mentioned1d ago

Timeline

3 articles · newest first

Siemens Mendix SAML module allows assertion-replay login bypass

Unauthenticated attackers can replay a valid IdP-initiated SAML response; fixes are V4.2.4 and V3.6.29.

CISA AdvisoriesOct 29, 12:00 UTC · 1d agoAdvisory 2 sourcesCVE-2026-892091

Siemens Mendix SAML module has an authentication-bypass flaw

Mendix 9 builds before V3.6.29 and Mendix 10 and 11 builds before V4.2.4 are affected; Canada urges administrators to apply updates.

Canadian Centre for Cyber Securityupdated Oct 29, 12:00 UTC · 1d agofirst Oct 26, 13:38 UTC · 4d agoAdvisory 2 sources1

[Control Systems] Siemens security advisory (AV26-881)

Siemens patched an account hijacking vulnerability in the Mendix SAML module affecting Mendix 9.24, 10, and 11 releases before fixed versions.

Canadian Centre for Cyber SecuritySep 3, 19:32 UTC · Sep 3, 2026Advisory1 · 1 read

Related CVEs

by mentions

CVE-2026-892097.6
SAML assertion replay in Mendix SAML IdP-initiated login
published 4d agoSiemens Mendix SAML (Mendix 10 compatible)

Appears with

Siemensvendor · 3
Canadian Centre for Cyber Securityorganization · 2
Siemens ProductCERTorganization · 1
CISAorganization · 1

Entities are extracted by the model from each article. First seen Sep 3, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.