Topic

SAML single sign-on security

Security of SAML-based federated login, covering assertion and response signing, signature verification, and the ways an identity assertion can be forged or replayed to take over a session.

Current clusters

security1 publisher

Siemens patches a Mendix SAML module that failed to validate response signatures

CVE-2026-80465 lets an unauthenticated remote attacker hijack an account in some single sign-on setups. The fix is a Mendix Marketplace module update. It has to be taken app by app across three version trains.

Publishers:cisa.gov

Reality

Evidence64
Adoption: Insufficient
Hype gap−15
Incentives55
Confidence68