CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 14:22.

Filters

1 active

Reset filters

Search: SSA-137528

Vendor

Protocol

Sector

Severity

Source

1 advisories found

SSA-137528

SSA-137528: Authentication Bypass Vulnerability in Mendix SAML module

Siemens — Mendix SAML (Mendix 10 compatible)

Siemens ProductCERTmiddel

Published

26 October 2026

Last update

26 October 2026

Linked CVEs

CVE-2026-89209

Affected sectors

Risk evaluation

Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for the affected products and recommends to update to the latest versions.

Mitigation summary

Disable IdP-initiated SSO

Revision history (1)

Initial publication — 26 October 2026
Publication Date

Official source: Siemens ProductCERT