[Control Systems] Siemens security advisory (AV26-881)

Serial Number: AV26-881
Date: September 3, 2026

As of September 3, 2026, Siemens is affected by a vulnerability in the following products:

• Mendix SAML (Mendix 10 compatible)
  • Prior to V4.2.3
• Mendix SAML (Mendix 11 compatible)
  • Prior to V4.2.3
• Mendix SAML (Mendix 9.24 compatible)
  • Prior to V3.6.27

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• SSA-887643: Account Hijacking Vulnerability in Mendix SAML module
• CERT Services | Siemens