CVE-2026-89292

In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIXBACKENDAPIKEY for all configured Infrastructures...

EUVD-2026-115727

In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIXBACKENDAPIKEY for all configured Infrastructures...

CVE-2026-89292 Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures

In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIXBACKENDAPIKEY for all configured Infrastructures...

CVE-2026-89292

In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 , an unauthenticated attacker can exfiltrate the MNESTIX_BACKEND_API_KEY for all configured Infrastructures. This vulnerability is associated with CWE-918 (Server-Side Request Forgery) and CWE-522 (Insufficiently Protected Cre...