Siemens Mendix SAML Module
Summary
Siemens Mendix SAML module has an authentication bypass vulnerability (CVE-2026-89209) that allows unauthenticated remote attackers to gain unauthorized access by replaying SAML assertions. Siemens has released updated versions of the affected products.
IFF Assessment
FOE
The vulnerability allows unauthenticated remote attackers to gain unauthorized access, posing a direct threat to the confidentiality and integrity of systems.
Severity
6.8
Medium
Defender Context
This vulnerability in Siemens Mendix SAML module allows attackers to bypass authentication by replaying SAML assertions. Defenders should prioritize patching or implementing the recommended mitigation of disabling IdP-initiated SSO to prevent unauthorized access to critical manufacturing and IT systems.