CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 8 November 2026 at 08:18.

Filters

1 active

Reset filters

Search: SSA-887643

Vendor

Protocol

Sector

Severity

Source

1 advisories found

SSA-887643

SSA-887643: Account Hijacking Vulnerability in Mendix SAML module

Siemens — Mendix SAML (Mendix 10 compatible)

Siemens ProductCERThigh

Published

3 September 2026

Last update

26 October 2026

Linked CVEs

CVE-2026-80465

Affected sectors

Risk evaluation

Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version.

Mitigation summary

Update to V3.6.29 or later version

Revision history (2)

Initial publication — 3 September 2026
Publication Date
Update A — 26 October 2026
Released new fixed versions, as the previous versions did not fully remediate the vulnerability.

Official source: Siemens ProductCERT