THREAT OPS › Threat News › Siemens Mendix SAML
Siemens Mendix SAML
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-258-06.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations. Mendix has provided fix releases for the Mendix SAML module and recommends to update to
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Indicators of compromise
- CVE-2026-80465cve
- https://www.cve.org/CVERecord?id=CVE-2026-80465url
- https://marketplace.mendix.com/link/component/1174url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Nurl
- https://www.siemens.com/cert/operational-guidelines-industrial-securityurl
- https://www.siemens.com/industrialsecurityurl
- https://www.siemens.com/cert/advisoriesurl
- https://cert-portal.siemens.com/productcert/html/ssa-887643.htmlurl
- https://cert-portal.siemens.com/productcert/csaf/ssa-887643.jsonurl
- https://www.siemens.com/productcert/terms-of-useurl
Original source: https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-06
Same event, other sources
- Siemens Mendix SAMLcisa_ics · 2026-09-15