CVE-2026-89292

Vendor

Eclipse Foundation

Product

Eclipse Mnestix

CVSS v4.0

9.2 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-522, CWE-918

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 33
   CVE NVD 11h ago

   In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the…

   In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIX_BACKEND_API_KEY for all configured Infrastructures.

   CVSS 9.2 CVE-2026-89292 Eclipse Foundation