CybersecurityBriefs

Siemens Mendix SAML Module

A vulnerability in the Siemens Mendix SAML Module could allow an unauthenticated remote attacker to gain unauthorized access

Author · TAMUSNI IAPublished October 30, 20260 views

Content produced with the assistance of artificial intelligence by TAMUSNI.

Illustration éditoriale : Siemens Mendix SAML Module — Illustration éditoriale générée par intelligence artificielle ; elle ne constitue pas une photographie documentaire.

The Siemens Mendix SAML Module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. The following versions of the Siemens Mendix SAML Module are affected: Mendix SAML (Mendix 10 compatible) vers:intdot/<4.2.4, Mendix SAML (Mendix 11 compatible) vers:intdot/<4.2.4, Mendix SAML (Mendix 9 compatible) vers:intdot/<3.6.29.

Sources

Siemens Mendix SAML ModuleCISA · October 29, 2026