Skip to content

Back to the catalog

cisa.govadvisory

Siemens Mendix SAML Module

ICSA-26-302-01 republishes Siemens SSA-137528 on the Mendix SAML module, which has an authentication bypass (CVE-2026-89209). An unauthenticated remote attacker can replay a valid SAML assertion in IdP-initiated flows to gain unauthorized access. Fixed in 4.2.4 for Mendix 10 and 11, and 3.6.29 for Mendix 9. Initial release was 26 October 2026.

TL;DR Siemens Mendix SAML module versions before 4.2.4 (3.6.29 for Mendix 9) allow authentication bypass via SAML assertion replay in IdP-initiated flows.
Open original ↗

Organisations named here

  • Siemens
  • CISA
  • ICSA-26-302-01
  • Siemens ProductCERT
  • SSA-137528

CVEs named here

  • CVE-2026-89209

Technologies named here

  • CSAF
  • SAML
  • Mendix
  • Siemens Mendix SAML Module: Mendix SAML (Mendix 10 compatible), versions below 4.2.4
  • Siemens operational guidelines for Industrial Security
  • Siemens ProductCERT SSA-137528

Techniques named here

  • SAML assertion replay in IdP-initiated authentication flows

Related in Identity & Access