Authentication Bypass in Mendix SAML from Mendix

CVE-2025-40758

What is CVE-2025-40758?

A security flaw has been detected in the Mendix SAML module, specifically in versions compatible with Mendix 10.12, 10.21, and 9.24. This vulnerability arises from inadequate enforcement of signature validation and binding checks, which may enable unauthenticated remote attackers to hijack user accounts, particularly in certain single sign-on (SSO) implementations. Organizations using affected versions are encouraged to update their software to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References