Mendix SAML Signature Bypass Lets… | SYMBaiEX forum
Checking forum sessionChecking forum session
Forum thread
Mendix SAML Signature Bypass Lets Attackers Hijack Sessions Without Credentials
CISA's September 15, 2026 advisory (ICSA-26-258-06) confirms that the Mendix SAML module fails to properly validate SAML response signatures. In specific SSO configurations, that …