{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/mendix-saml-mendix-10-compatible--v4.2.4/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Mendix SAML (Mendix 10 compatible) (\u003c V4.2.4)","Mendix SAML (Mendix 11 compatible) (\u003c V4.2.4)","Mendix SAML (Mendix 9 compatible) (\u003c V3.6.29)"],"_cs_severities":["high"],"_cs_tags":["authentication-bypass","vulnerability","industrial-control-systems"],"_cs_type":"advisory","_cs_vendors":["Siemens"],"content_html":"\u003cp\u003eSiemens has released security advisory SSA-137528 regarding an authentication bypass vulnerability affecting specific versions of the Mendix SAML module. The vulnerability impacts modules compatible with Mendix 9, 10, and 11. Siemens advises users and administrators to update to the patched versions to mitigate the potential for unauthorized access.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation could allow an unauthenticated attacker to bypass authentication mechanisms, potentially leading to unauthorized access to affected applications.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Mendix SAML (Mendix 10 compatible) to V4.2.4 or later.\u003c/li\u003e\n\u003cli\u003eUpgrade Mendix SAML (Mendix 11 compatible) to V4.2.4 or later.\u003c/li\u003e\n\u003cli\u003eUpgrade Mendix SAML (Mendix 9 compatible) to V3.6.29 or later.\u003c/li\u003e\n\u003cli\u003eReview the Siemens security advisory SSA-137528 for additional configuration guidance.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-26T15:52:09Z","date_published":"2026-10-26T15:52:09Z","id":"https://feed.craftedsignal.io/briefs/2026-10-siemens-mendix-saml/","summary":"Siemens has identified an authentication bypass vulnerability in its Mendix SAML module, which could allow unauthenticated attackers to circumvent authentication controls.","title":"Siemens Mendix SAML: Authentication bypass","url":"https://feed.craftedsignal.io/briefs/2026-10-siemens-mendix-saml/"}],"language":"en","title":"CraftedSignal Threat Feed - Mendix SAML (Mendix 10 Compatible) (\u003c V4.2.4)","version":"https://jsonfeed.org/version/1.1"}