CERT24CVE-2026-89209: SAML Assertion Replay Vulnerability in MendixLoading data…
CERT24Threat Observatory
Period

CVE-2026-89209: SAML Assertion Replay Vulnerability in Mendix

Affected versions of the Mendix SAML modules do not properly protect against SAML assertion replay in IdP-initiated authentication flows. This could allow unauthenticated remote attackers to gain unauthorized access to the application by replaying a valid SAML response.

← Back to intelligence

CVE-2026-89209: SAML Assertion Replay Vulnerability in Mendix

Affected versions of the Mendix SAML modules do not properly protect against SAML assertion replay in IdP-initiated authentication flows. This could allow unauthenticated remote attackers to gain unauthorized access to the application by replaying a valid SAML response.