Skip to content
fr Sign in
9.2 Critical

CVE-2026-89292 In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker…

Description

In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIX_BACKEND_API_KEY for all configured Infrastructures.

Affected products and versions

Product Affected versions Fixed in
Eclipse Mnestix 1.6 1.6.0 → < 2.3.0 2.3.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Eclipse Mnestix

The 3 CVEs of Eclipse Mnestix →
CVE-2026-89295 In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a practical upper bound on the… Not rated CVE-2026-89293 In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker… 8.8 High
Track this CVE