Advisories · Technology

Eclipse Foundation Eclipse Mnestix.

Every CVE that names Eclipse Foundation Eclipse Mnestix among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-89295 CVE record

Unauthenticated memory-exhaustion denial of service in Eclipse Mnestix AAS Generator unbounded count parameter
- Eclipse Foundation Eclipse Mnestix
- Denial of service
Not analysed yet 3 Nov 2026
CVE-2026-89293 CVE record

CVSS 8.8 High

Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tampering
- Eclipse Foundation Eclipse Mnestix
- Broken access control
- CWE-602
Not analysed yet 3 Nov 2026
CVE-2026-89292 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures
- Eclipse Foundation Eclipse Mnestix
- Hard-coded credentials
- Server-side request forgery (SSRF)
Not analysed yet 3 Nov 2026