Live › vulnerability › CVE-2026-89293
Eclipse Mnestix Browser versions 1.2.0 up to but excluding 2.3.0 let an unauthenticated attacker run actions meant only for authorized users. The examples given are changing Infrastructure settings and calling the connected Mnestix AAS Generator backend.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 10:20 UTC. All times on this page are UTC.
Teams that run Eclipse Mnestix Browser in the affected version range are exposed, since the flaw lets an unauthenticated attacker act with authorized-user rights. The sources do not say whether default configurations or specific deployment setups change exposure. unknown whether a deployment with network restrictions is safe.
No product ranges from the sources yet.
2.3.0 are affected2.3.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions that are only allowed to be executed by an authorized Mnestix user, like changing the Infrastructure settings or calling the connected and authenticated Mnestix AAS Generator backend.
This page as .md · .json · in your agent: get_signal("CVE-2026-89293")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.