High SSA-887643 1 CVE

SSA-887643: Account Hijacking Vulnerability in Mendix SAML module

Published Sep 3, 2026 · Updated Oct 26, 2026 · Revision 2

Vendor: Siemens Product: Mendix SAML (Mendix 10 compatible) Product: Mendix SAML (Mendix 11 compatible) Product: Mendix SAML (Mendix 9.24 compatible)

Summary

Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations.

Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version.

Vulnerabilities 1

High 8.7

CVE-2026-80465

A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix …

Siemens Mendix SAML (Mendix 10 compatible) Mendix SAML (Mendix 9.24 compatible) Mendix SAML (Mendix 11 compatible) ICS / OT

Sep 3, 2026

Revision history

2026-10-26 #2
Released new fixed versions, as the previous versions did not fully remediate the vulnerability.
2026-09-03 #1
Publication Date

References

SSA-887643: Account Hijacking Vulnerability in Mendix SAML module - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-887643.html