Unauthorized Actions in Eclipse Mnestix Browser Affecting Users
CVE-2026-89293

8.8HIGH

Key Information:

Vendor
CVE Published:
3 November 2026

What is CVE-2026-89293?

In certain versions of Eclipse Mnestix Browser, an unauthorized user can exploit a vulnerability that allows the execution of privileged actions typically reserved for authenticated users. This includes changing critical Infrastructure settings and interfacing with the connected Mnestix AAS Generator backend. Without appropriate authentication checks, this flaw poses significant risks, potentially enabling unauthorized modifications and access to sensitive configurations.

Affected Version(s)

Eclipse Mnestix 1.2.0 < 2.3.0

References

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Eclipse Foundation Security Team
.