Mendix SAML (Mendix 11 Compatible) (< V4.2.4) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/mendix-saml-mendix-11-compatible--v4.2.4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 15:52:09 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSiemens Mendix SAML: Authentication bypasshttps://feed.craftedsignal.io/briefs/2026-10-siemens-mendix-saml/Mon, 26 Oct 2026 15:52:09 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-siemens-mendix-saml/Siemens has identified an authentication bypass vulnerability in its Mendix SAML module, which could allow unauthenticated attackers to circumvent authentication controls.Siemens has released security advisory SSA-137528 regarding an authentication bypass vulnerability affecting specific versions of the Mendix SAML module. The vulnerability impacts modules compatible with Mendix 9, 10, and 11. Siemens advises users and administrators to update to the patched versions to mitigate the potential for unauthorized access.

Impact

Successful exploitation could allow an unauthenticated attacker to bypass authentication mechanisms, potentially leading to unauthorized access to affected applications.

Recommendation

  • Upgrade Mendix SAML (Mendix 10 compatible) to V4.2.4 or later.
  • Upgrade Mendix SAML (Mendix 11 compatible) to V4.2.4 or later.
  • Upgrade Mendix SAML (Mendix 9 compatible) to V3.6.29 or later.
  • Review the Siemens security advisory SSA-137528 for additional configuration guidance.
]]>highadvisoryauthentication-bypassvulnerabilityindustrial-control-systems