[Control Systems] Siemens security advisory (AV26-881)
Siemens patched an account hijacking vulnerability in the Mendix SAML module affecting Mendix 9.24, 10, and 11 releases before fixed versions.
The Canadian Centre for Cyber Security relayed Siemens advisory SSA-887643, which addresses an account hijacking vulnerability in the Mendix SAML module. Affected components are the Mendix 10 and Mendix 11 compatible modules prior to V4.2.3 and the Mendix 9.24 compatible module prior to V3.6.27. Administrators are encouraged to review the linked advisories and apply the available updates.
- Affects Mendix SAML modules for Mendix 9.24, 10, and 11 prior to fixed versions
- Siemens advisory SSA-887643 covers account hijacking in the SAML module
- Canadian Cyber Centre urges administrators to apply available updates
- Vendors
- Siemens
- Products
- Mendix SAML
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
From the original article
1 min read at cyber.gc.ca
Serial Number: AV26-881 Date: September 3, 2026 As of September 3, 2026, Siemens is affected by a vulnerability in the following products: Mendix SAML (Mendix 10 compatible) Prior to V4. 2. 3 Mendix SAML (Mendix 11 compatible) Prior to V4.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.