CVE-2026-89293

In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions that are only allowed to be executed by an authorized Mnestix user, like changing the Infrastructure settings or calling the connected and authenticated Mnesti...

EUVD-2026-115729

In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions that are only allowed to be executed by an authorized Mnestix user, like changing the Infrastructure settings or calling the connected and authenticated Mnesti...

CVE-2026-89293

Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 are vulnerable to a missing authorization flaw (CWE-862 , CWE-602 ). An unauthenticated attacker can perform actions reserved for authorized users, such as modifying Infrastructure settings or interacting with the authenticated M...