Medium SSA-137528 1 CVE

SSA-137528: Authentication Bypass Vulnerability in Mendix SAML module

Published Oct 26, 2026 · Updated Oct 26, 2026

Vendor: Siemens Product: Mendix SAML (Mendix 10 compatible) Product: Mendix SAML (Mendix 11 compatible) Product: Mendix SAML (Mendix 9 compatible)

Summary

Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Medium 6.8

CVE-2026-89209

A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix …

Siemens Mendix SAML (Mendix 10 compatible) Mendix SAML (Mendix 11 compatible) Mendix SAML (Mendix 9 compatible) ICS / OT

Oct 26, 2026

Revision history

2026-10-26 #1
Publication Date

References

SSA-137528: Authentication Bypass Vulnerability in Mendix SAML module - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-137528.html