Siemens disclosed CVE-2026-89209 in its Mendix SAML module, which can let an unauthenticated attacker log in remotely by replaying a valid SAML response. CISA republished the advisory on October 29 as ICSA-26-302-01.
This story is only covered by news sources that have yet to be evaluated by the independent media monitoring agencies we use to assess the quality and reliability of news outlets on our platform. Learn more here.