Skip to content
fr Sign in
8.8 High

CVE-2026-89293 In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker…

Description

In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions that are only allowed to be executed by an authorized Mnestix user, like changing the Infrastructure settings or calling the connected and authenticated Mnestix AAS Generator backend.

Affected products and versions

Product Affected versions Fixed in
Eclipse Mnestix 1.2 1.2.0 → < 2.3.0 2.3.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Eclipse Mnestix

The 3 CVEs of Eclipse Mnestix →
CVE-2026-89295 In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a practical upper bound on the… Not rated CVE-2026-89292 In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker… 9.2 Critical
Track this CVE