CVE-2026-89209

The Mendix SAML module is vulnerable to SAML assertion replay in IdP-initiated authentication flows. This flaw affects Mendix 10 compatible versions prior to V4.2.4 , Mendix 11 compatible versions prior to V4.2.4 , and Mendix 9 compatible versions prior to V3.6.29 . An unauthenticated remote atta...