Mendix Runtime contains an observable response discrepancy vulnerability when validating usernames during authentication. This could allow unauthenticated remote attackers to distinguish between valid and invalid usernames.
Siemens has released new versions for the affected products and recommends to update to the latest versions.

https://cert-portal.siemens.com/productcert/html/ssa-097435.html