As cited
Copy frozen at (site build).
vulnerabilities
Siemens Mendix SAML
CVE-2026-80465 affects Siemens Mendix SAML modules across versions compatible with Mendix 9.24, 10, and 11 due to improper validation of SAML response signatures. Unauthenticated remote attackers could hijack user accounts in specific single sign-on (SSO) configurations. Siemens has released patched versions 3.6.27 and 4.2.3 for affected module variants.
Why it matters: Organizations using Mendix SAML for authentication must patch immediately to prevent account takeover attacks, particularly those relying on SSO for access control across critical manufacturing or information technology systems.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Siemens Mendix SAML
The Siemens Mendix SAML module contains a signature validation flaw (CVE-2026-80465, CVSS 8.8) that allows unauthenticated remote attackers to hijack user accounts in certain SSO configurations. Affected versions across Mendix 9.24, 10, and 11 platforms fail to properly verify SAML response signatures. Siemens has released patched versions 3.6.27 and 4.2.3 for affected module variants.
Why it matters: Organizations using Mendix SAML for single sign-on authentication must patch immediately to prevent account hijacking, as the vulnerability requires no user interaction and can compromise any identity federated through affected deployments.
- Source published
- First seen by Cybersecurity Tracker