https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-27T12:47:00.305017+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-89209 fkie_cve-2026-89209 2026-10-27T12:47:00.309208+00:00

A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 9 compatible) (All versions < V3.6.29). Affected versions of the module do not properly protect against SAML assertion replay in IdP-initiated authentication flows. This could allow unauthenticated remote attackers to gain unauthorized access to the application by replaying a valid SAML response.

 https://db.gcve.eu/vuln/ghsa-c6gm-hvjc-mr8p GHSA-c6gm-hvjc-mr8p 2026-10-27T12:47:00.309271+00:00

A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 9 compatible) (All versions < V3.6.29). Affected versions of the module do not properly protect against SAML assertion replay in IdP-initiated authentication flows. This could allow unauthenticated remote attackers to gain unauthorized access to the application by replaying a valid SAML response.

 https://db.gcve.eu/vuln/ssa-137528 SSA-137528 — SSA-137528: Authentication Bypass Vulnerability in Mendix SAML module 2026-10-27T12:47:00.309298+00:00

Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows.

Siemens has released new versions for the affected products and recommends to update to the latest versions.