CVE-2026-89209

Vendor

Siemens

Product

Mendix SAML (Mendix 10 compatible), Mendix SAML (Mendix 11 compatible), Mendix SAML (Mendix 9 compatible)

CVSS v3.1

6.8 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Weakness

CWE-294

Exposure class

OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 32
   ICS advisory CISA ICS 2d ago

   Siemens Mendix SAML Module

   Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens…

   Fix available CVE-2026-89209 Siemens
2. 10
   CVE NVD 5d ago

   A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions <…

   A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 9 compatible) (All versions < V3.6.29). Affected…

   CVSS 6.8 CVE-2026-89209 Siemens