#mendix

0 stories this week · 2 this month · 5 in 6 months · mostly security

Stories per day · 30 days

5 stories, newest first · one card per story

Unauthenticated attackers can replay a valid IdP-initiated SAML response; fixes are V4.2.4 and V3.6.29.

Mendix 9 builds before V3.6.29 and Mendix 10 and 11 builds before V4.2.4 are affected; Canada urges administrators to apply updates.

CISA revoked its Siemens Mendix Runtime advisory after CVE-2026-7891 was rejected as expected behavior.

CISA AdvisoriesSep 15, 2026high

Siemens Mendix SAML module fails signature validation, allowing unauthenticated account hijacking in specific SSO configurations (CVE-2026-80465).

4 min readcisa mendix

Siemens patched an account hijacking vulnerability in the Mendix SAML module affecting Mendix 9.24, 10, and 11 releases before fixed versions.

Stories tagged #mendix